Lucene search
+L

5 matches found

NVD
NVD
•added 2026/04/06 3:17 p.m.•35 views

CVE-2026-26026

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6...

9.1CVSS0.0054EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/04/06 2:33 p.m.•7 views

CVE-2026-26026 GLPI has a Server-Side Template Injection via Double-Compilation

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6...

9.1CVSS5.9AI score0.0054EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•2 views

CVE-2026-26026: Improper Control of Generation of Code

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6...

9.1CVSS5.9AI score0.0054EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/17 7:41 p.m.•16 views

CVE-2026-25936 GLPI Vulnerable to Authenticated SQL Injection

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, an authenticated user can perfom a SQL injection. Version 11.0.6 fixes the issue...

6.5CVSS5.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•20 views

GLPI 代码问题漏洞

GLPI is an open-source IT and asset management software developed by GLPI. This software provides a comprehensive IT resource management interface, allowing you to create databases to manage various IT assets such as computers, monitors, servers, printers, network devices, telephones, and even...

9.1CVSS6AI score0.00337EPSS
SaveExploits0References3
Rows per page
Query Builder