Security Advisory

CVE-2026-40108

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-02 23:02:35

Last updated 2026-06-03 12:41:58

Assigner GitHub_M

CVSS score not scored

State PUBLISHED

Description

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, a technician can store an XSS payload in a ITIL costs. This issue has been fixed in version 11.0.7.

← Browse all CVEs View on cve.org ↗