CVE-2026-49469 GLPI: LDAP filter injection in user import feature

GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner or technician can submit crafted criteria through the user import feature to bypass the configured default LDAP filter. This allows access to LDAP objects that the default filter...

CVE-2026-49469

The asset and IT management software GLPI is vulnerable to an LDAP filter injection in the user import feature. In versions 0.70 through 10.0.26 and 11.0.8 , an authenticated hotliner or technician can submit crafted criteria to bypass the configured default LDAP filter. This allows the attacker ...

PT-2017-9981

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions prior to 9.0.2 Description The issue concerns a problem with calculating ACLs on LDAP objects across partition boundaries, potentially leading to a privilege escalation. This could occur by modifying user attributes...

CVE-2016-9167: Undefined Security Weakness

NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL...