CVE-2026-53627

The asset and IT management software GLPI versions 11.0.0 through 11.0.8 is vulnerable to an authorization bypass. A low-privileged authenticated user can exploit the API (v2) to perform update operations that are restricted through the standard user interface. This occurs because the API update ...