The vulnerability arises from unsanitized array keys used when deleting service dependencies in the Centreon Web on the Central Server. This flaw allows a blind SQL injection that can be triggered when processing deletion requests. Based on the description, it is inferred that an attacker could manipulate the underlying database queries, potentially retrieving or altering data stored in the database.

Centreon Web on the Central Server, specifically the Service Dependencies module on Linux, is affected. Versions prior to 25.10.8, 24.10.20, and 24.04.24 are listed as vulnerable in the vendor advisory.

The flaw carries a CVSS score of 8.3, indicating high severity. The EPSS score is reported as less than 1%, suggesting a low probability of active exploitation at the time of assessment, and it is not listed in the CISA KEV catalog. The likely attack path involves interacting with the deletion endpoint exposed in the web interface, which requires the ability to send requests to that endpoint. Based on the description, it is inferred that the attacker could exploit the vulnerability by sending crafted deletion requests that include malicious array keys.