Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how glpi compares to other vendors in security performance

View Risk Score →

GLPI DataInjection pluginGLPI DataInjection Plugin Authenticated SQL Injection via CSV Import

Risk 62
Severity
7.1
First published (updated )
CVE-2026-11321

GLPI GLPI 11GLPI 11 before 2.14.4 Tag Plugin Stored Cross-Site Scripting in Kanban Badge Rendering

Risk 62
Severity
7.3
First published (updated )
CVE-2026-53987

GLPI GLPIGLPI has stored XSS in asset locks

Risk 70
Severity
8.4
First published (updated )
CVE-2026-42321

GLPI GLPIGLPI vulnerable to arbitrary file access

Risk 32
Severity
5.9
First published (updated )
CVE-2026-42320

GLPI GLPIGLPI Vulnerable to Arbitrary Item Deletion via Planning Endpoint

Risk 52
Severity
7
First published (updated )
CVE-2026-42318
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI vulnerable to arbitrary files deletion by technician

Risk 52
Severity
7
First published (updated )
CVE-2026-42317

GLPI GLPIGLPI vulnerable to unauthorized reading of a specific asset object

Risk 52
Severity
7
First published (updated )
CVE-2026-44281

GLPI GLPIGLPI Vulnerable to Stored XSS in ITIL Costs

Risk 62
Severity
7.1
First published (updated )
CVE-2026-40108

GLPI GLPIGLPI 11.0.0 - Stored XSS in knowledge base

Risk 70
Severity
8.4
First published (updated )
CVE-2026-5385

GLPI GLPIGLPI: Unauthorized export of form structure

Risk 23
Severity
5.1
First published (updated )
CVE-2026-32312
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPI Inventory PluginGLPI Inventory Plugin has SQL Injection on dropdown_calendar Report

Risk 79
Severity
8.8
First published (updated )
CVE-2026-26001

GLPI FieldsFields GLPI plugin vulnerable to RCE in dropdown generation

Risk 72
Severity
9.1
First published (updated )
CVE-2026-23489

GLPI GLPI Inventory PluginGLPI Inventory Plugin has Reflected XSS in task jobs

Risk 38
Severity
6.1
First published (updated )
CVE-2026-25590

GLPI GLPIGLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpoint

Risk 33
Severity
6.9
First published (updated )
CVE-2023-53943

GLPI Inventory PluginGLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection

Risk 43
Severity
7.5
First published (updated )
CVE-2025-32786
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI permits unauthorized rules execution order

Risk 70
Severity
7.5
First published (updated )
CVE-2025-53105

GLPI screenshot-pluginglpi-screenshot-plugin exposes local files in /ajax/screenshot.php

Risk 44
Severity
7.7
First published (updated )
CVE-2025-54780

GLPI GLPIGLPI permits reservation modification by unauthorized users

Risk 34
Severity
5.4
First published (updated )
CVE-2025-53357

GLPI GLPIGLPI technicians can access unauthorized information through external links

Risk 16
Severity
2.7
First published (updated )
CVE-2025-53113

GLPI GLPIGLPI's incomprehensive permission checks can lead to data removal from allowed users

Risk 22
Severity
4.3
First published (updated )
CVE-2025-53112
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI exposes data to non-allowed users

Risk 38
Severity
6.5
First published (updated )
CVE-2025-53111

GLPI GLPIGLPI's MailCollector Receiver is vulnerable to credential exfiltration

Risk 38
Severity
6.5
First published (updated )
CVE-2025-53008

GLPI GLPIGLPI is vulnerable to XSS and open redirection attacks through planning feature

Risk 37
Severity
6.5
First published (updated )
CVE-2025-52897

GLPI GLPIGLPI has overly permissive URL verification

Risk 26
Severity
5
First published (updated )
CVE-2025-52567

GLPI GLPIGLPI is susceptible to Stored XSS attack through project's kanban

Risk 34
Severity
5.4
First published (updated )
CVE-2025-27514
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI Inventory PluginGLPI Inventory plugin has Improper Access Control Vulnerability

Risk 43
Severity
8.2
EPSS
0.03%
First published (updated )
CVE-2025-27147

GLPI GLPIGLPI allows authenticated remote code execution

Risk 82
Severity
8.8
First published (updated )
CVE-2025-24801

GLPI GLPIGLPI allows unauthenticated SQL injection through the inventory endpoint

Risk 90
Severity
9.8
First published (updated )
CVE-2025-24799

GLPI GLPIGLPI allows SQL injection through the rules configuration

Risk 86
Severity
9.8
First published (updated )
CVE-2025-21619

GLPI Inventory PluginGLPI Inventory Plugin vulnerable to reflective Cross-site Scripting

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2025-26626
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203