CVE-2026-42318 in glpiinformación

Resumen

por MITRE • 2026-06-03

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User's planning.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

GitHub M

Reservar

2026-04-26

Divulgación

2026-06-03

Moderación

aceptado

Artículo

VDB-368145

CPE

listo

EPSS

0.00000

KEV

no

Actividades

bajo

Sector

Hospital, Government, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-42318
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42318
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-42318/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!