Beveiligingsadvies

CVE-2026-26027

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 14:35:53

Laatst bijgewerkt 2026-04-07 03:55:40

Toegewezen door GitHub_M

CVSS-score 7.5

Status PUBLISHED

Beschrijving

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload through the inventory endpoint. This vulnerability is fixed in 11.0.6.

← Alle CVE's bekijken Bekijk op cve.org ↗