Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Teclib-edition Component: Glpi Clear all filters
TI-2026-20967 CVE-2026-25937

GLPI has a MFA bypass

Priority LOW 31

GLPI is a free Asset and IT management software package.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0031 Published 2026-03-17 Fixed in 11.0.6 CWE-287
TI-2026-17858 CVE-2026-22248

GLPI affected by Remote Code Execution via malicious upload

Priority MEDIUM 40

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00366 Published 2026-03-11 Fixed in 11.0.5 CWE-502