Known vulnerabilities in GLPI - page 2

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 206 known vulnerabilities: 1 critical, 27 high, 70 medium, 108 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-5385
CWE-79 Low
No
No
11.0.7 01.06.2026 SB2026051871
#VU133161 - Improper Access Control
CVE-2026-42317
CWE-284 Low
No
No
10.0.25, 11.0.7 01.06.2026 SB2026051871
#VU133160 - Improper Access Control
CWE-284 Low
No
No
10.0.25, 11.0.7 01.06.2026 SB2026051871
#VU133159 - Missing Authorization
CVE-2026-44281
CWE-862 Low
No
No
11.0.7 01.06.2026 SB2026051871
#VU133158 - Improper Access Control
CWE-284 Low
No
No
11.0.7 01.06.2026 SB2026051871
#VU133157 - Improper Access Control
CWE-284 Low
No
No
11.0.7 01.06.2026 SB2026051871
#VU133156 - Improper Access Control
CWE-284 Low
No
No
10.0.25, 11.0.7 01.06.2026 SB2026051871
#VU133155 - Improper Access Control
CWE-284 Low
No
No
11.0.7 01.06.2026 SB2026051871
#VU133154 - Incorrect Comparison
CWE-697 Low
No
No
11.0.7 01.06.2026 SB2026051871
#VU133153 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40108
CWE-79 Low
No
No
11.0.7 01.06.2026 SB2026051871
#VU125060 - Improper Access Control
CVE-2025-53105
CWE-284 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU125059 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2025-27514
CWE-80 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU125058 - Server-Side Request Forgery (SSRF)
CVE-2025-52567
CWE-918 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU125057 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2025-52897
CWE-80 Medium
No
No
10.0.19 07.04.2026 SB2026040798
#VU125056 - Improper Access Control
CVE-2025-53008
CWE-284 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU125055 - Authorization Bypass Through User-Controlled Key
CVE-2025-53357
CWE-639 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU125054 - Improper Access Control
CVE-2025-53113
CWE-284 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU125053 - Improper Access Control
CVE-2025-53111
CWE-284 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU125052 - Improper Access Control
CVE-2025-53112
CWE-284 Low
No
No
10.0.19 07.04.2026 SB2026040798
#VU124958 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-25932
CWE-79 Low
No
No
10.0.24 06.04.2026 SB20260406118


Showing elements 21 - 40 out of 206