Linux Distros Unpatched Vulnerability : CVE-2026-108726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they canno...

CVE-2026-108726

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

CVE-2026-108726

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

UBUNTU-CVE-2026-108726

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

EUVD-2026-96892

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

CVE-2026-108726

The GLPI application through version 12.0.0 is vulnerable to a missing authorization vulnerability in the ajax/map.php component. The root cause is the omission of the canView() check, which allows authenticated low-privileged users to search for itemtypes they are not authorized to view. By subm...

CVE-2026-108726 GLPI through 12.0.0 Missing Authorization via ajax/map.php

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

CVE-2026-108726 GLPI through 12.0.0 Missing Authorization via ajax/map.php

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

CVE-2026-108726 GLPI through 12.0.0 Missing Authorization via ajax/map.php

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

CVE-2026-108726: Missing Authorization

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting the canView check. Attackers can submit crafted itemtype and search criteria for types like Contact, Supplier, Contrac...

PT-2026-110129

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 12.0.1 Description An authorization flaw exists in the 'ajax/map.php' endpoint. Authenticated users with low privileges can bypass the canView check by submitting crafted search criteria and itemtype values. This allows...