<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: open tickets</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-2749: Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This</title><link>https://patchthecve.com/cve/CVE-2026-2749.html</link><guid>https://patchthecve.com/cve/CVE-2026-2749.html</guid><pubDate>Wed, 17 Jun 2026 10:31:39 +0000</pubDate><description>CRITICAL 9.9: Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.</description></item><item><title>CVE-2025-8460: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in C</title><link>https://patchthecve.com/cve/CVE-2025-8460.html</link><guid>https://patchthecve.com/cve/CVE-2025-8460.html</guid><pubDate>Mon, 19 Oct 2026 22:10:00 +0000</pubDate><description>MEDIUM 6.8: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in Centreon Infra Monitoring (Notification rules, Open tickets module) 

allows Stored 

XSS by users with elevated privileges.This issue affects Infra Monitoring: from 24.10.0 before 24.10.5, f</description></item><item><title>CVE-2025-12514: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in Centreon</title><link>https://patchthecve.com/cve/CVE-2025-12514.html</link><guid>https://patchthecve.com/cve/CVE-2025-12514.html</guid><pubDate>Mon, 19 Oct 2026 22:10:00 +0000</pubDate><description>HIGH 7.2: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in Centreon Infra Monitoring - Open-tickets (Notification rules configuration parameters, Open tickets modules) allows 

SQL Injection to user with elevated privileges.This issue affects Infra Monitori</description></item></channel></rss>