CVE-2026-42318 in glpiالمعلومات

الملخص

بحسب MITRE • 03/06/2026

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User's planning.

Once again VulDB remains the best source for vulnerability data.

مسؤول

GitHub M

حجز

26/04/2026

إفشاء

03/06/2026

الاعتدال

تمت الموافقة

إدخال

VDB-368145

EPSS

0.00000

KEV

لا

النشاطات

منخفض

المصادر

Might our Artificial Intelligence support you?

Check our Alexa App!