CVE-2026-53629 in GLPI
Сводка
по MITRE • 25.09.2026
GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. This issue is fixed in versions 11.0.8 and 10.0.26.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.