glpi-project vulnerabilities

CVEs per yearBy the year they were published

1. 202015
2. 202113
3. 202227
4. 202335
5. 202432
6. 202523
7. 202643

Newest CVEs

• CVE-2026-53631

  GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feeds

  glpi-project · glpi

  Medium5.3
• CVE-2026-47678

  GLPI: Blind Time based SQLI in dropdowns

  glpi-project · glpi

  High8.7
• CVE-2026-52848

  GLPI: MFA bypass

  glpi-project · glpi

  Critical9.2
• CVE-2026-57152

  GLPI: Unallowed notifications sending

  glpi-project · glpi

  High7.1
• CVE-2026-121559

  GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning

  glpi-project · GLPI

  High8.6
• CVE-2026-108726

  GLPI through 12.0.0 Missing Authorization via ajax/map.php

  glpi-project · GLPI

  Medium5.3
• CVE-2026-53629

  GLPI: SQL injection in history tab

  glpi-project · glpi

  High7.1
• CVE-2026-53626

  GLPI: Arbitrary Document Read via Form Context Authorization Bypass

  glpi-project · glpi

  High7.1
• CVE-2026-48482

  GLPI: RCE via Form import

  glpi-project · glpi

  Critical9.4
• CVE-2026-53625

  GLPI: Privilege Escalation via authtype API manipulation

  glpi-project · glpi

  High7.5