CVE-2026-34741 in iTop

Sumário

de MITRE • 22/08/2026

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: GitHub M
• Reservar: 30/03/2026
• Divulgação: 22/08/2026
• Moderação: aceite
• Entrada: VDB-394259
• CPE: pronto
• CWE: CWE-287 (confirmado)
• CVSS: 8.6 (CNA)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-34741
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-34741
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-34741/