Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how glpi-project compares to other vendors in security performance

View Risk Score →

GLPI-PROJECT GLPIglpi-project glpi Document document.send.php canViewFile authorization

Risk 29
Severity
6.3
First published (updated )
CVE-2026-13490

GLPI GLPIGLPI: Unauthorized export of form structure

Risk 23
Severity
5.1
First published (updated )
CVE-2026-32312

GLPI-PROJECT GLPIGLPI has an Authenticated SQL Injection via log exports

Risk 79
Severity
8.8
First published (updated )
CVE-2026-29047

GLPI-PROJECT GLPIGLPI has an Unauthenticated SQL Injection via Search engine

Risk 86
Severity
9.8
First published (updated )
CVE-2026-26263

GLPI-PROJECT GLPIGLPI has an Unauthenticated Stored XSS via inventory

Risk 69
Severity
7.5
First published (updated )
CVE-2026-26027
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI-PROJECT GLPIGLPI has a Server-Side Template Injection via Double-Compilation

Risk 72
Severity
9.1
First published (updated )
CVE-2026-26026

GLPI-PROJECT GLPIGLPI has Stored XSS in Supplier 'Website' field

Risk 66
Severity
7.2
First published (updated )
CVE-2026-25932

GLPI GLPI Inventory PluginGLPI Inventory Plugin has SQL Injection on dropdown_calendar Report

Risk 79
Severity
8.8
First published (updated )
CVE-2026-26001

GLPI GLPI Inventory PluginGLPI Inventory Plugin has Reflected XSS in task jobs

Risk 38
Severity
6.1
First published (updated )
CVE-2026-25590

glpi/mreportingmreporting affected by a SQLI on date change

Risk 38
Severity
6.5
First published (updated )
CVE-2026-22821
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

glpi/glpiGLPI is Vulnerable to Authenticated SQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2026-22044

GLPI-PROJECT GLPIGLPI is vulnerable to session stealing on externally authenticated user change

Risk 27
Severity
6.5
EPSS
0.08%
First published (updated )
CVE-2026-23624

GLPIGLPI is Vulnerable to SSRF via Webhooks

Risk 72
Severity
9.1
First published (updated )
CVE-2026-22247

glpiGLPI has an unauthenticated SQL injection through the inventory endpoint

Risk 86
Severity
9.8
First published (updated )
CVE-2025-66417

GLPI-PROJECT GLPIGLPI incorrectly authorizes access to documents

Risk 43
Severity
7.5
First published (updated )
CVE-2025-64516
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpoint

Risk 33
Severity
6.9
First published (updated )
CVE-2023-53943

pypi/glpiGLPI vulnerable to unauthorized access to restricted Knowledge Base items through the API

Risk 38
Severity
6.5
First published (updated )
CVE-2025-64520

glpi/glpiGLPI Vulnerable to Unauthenticated Stored XSS on the Inventory page

Risk 37
Severity
6.5
First published (updated )
CVE-2025-59935

GLPI GLPIGLPI permits reservation modification by unauthorized users

Risk 34
Severity
5.4
First published (updated )
CVE-2025-53357

GLPI GLPIGLPI technicians can access unauthorized information through external links

Risk 16
Severity
2.7
First published (updated )
CVE-2025-53113
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI's incomprehensive permission checks can lead to data removal from allowed users

Risk 22
Severity
4.3
First published (updated )
CVE-2025-53112

GLPI GLPIGLPI exposes data to non-allowed users

Risk 38
Severity
6.5
First published (updated )
CVE-2025-53111

GLPI GLPIGLPI's MailCollector Receiver is vulnerable to credential exfiltration

Risk 38
Severity
6.5
First published (updated )
CVE-2025-53008

GLPI GLPIGLPI is vulnerable to XSS and open redirection attacks through planning feature

Risk 37
Severity
6.5
First published (updated )
CVE-2025-52897

GLPI GLPIGLPI has overly permissive URL verification

Risk 26
Severity
5
First published (updated )
CVE-2025-52567
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GLPI GLPIGLPI is susceptible to Stored XSS attack through project's kanban

Risk 34
Severity
5.4
First published (updated )
CVE-2025-27514

GLPI GLPIGLPI allows authenticated remote code execution

Risk 82
Severity
8.8
First published (updated )
CVE-2025-24801

GLPI GLPIGLPI allows unauthenticated SQL injection through the inventory endpoint

Risk 90
Severity
9.8
First published (updated )
CVE-2025-24799

GLPI GLPIGLPI allows SQL injection through the rules configuration

Risk 86
Severity
9.8
First published (updated )
CVE-2025-21619

GLPI GLPIGLPI allows unauthorized access to debug mode

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2025-25192
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203