Known vulnerabilities in GLPI Inventory plugin

Vendor: glpi-project
Software: GLPI Inventory plugin
Software CPE: cpe:2.3:a:glpi-project:glpi_inventory_plugin:*:*:*:*:*:glpi:*:*
Website: https://glpi-project.org/
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI Inventory plugin GLPI Inventory plugin is affected by 8 known vulnerabilities: 1 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137279 - Missing Authentication for Critical Function
CVE-2026-48728		 CWE-306 Medium
No
No
 1.6.8 09.07.2026 SB2026070949
#VU128158 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-26001		 CWE-89 Low
No
No
 1.6.6 27.04.2026 SB2026030332
#VU123442 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-25590		 CWE-79 Low
No
No
 1.6.6 03.03.2026 SB2026030332
#VU118086 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-32786		 CWE-89 High
No
No
 1.5.1 04.11.2025 SB2025110444
#VU128157 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27147		 CWE-22 Low
No
No
 1.5.0 25.03.2025 SB2025032580
#VU128156 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26626		 CWE-79 Medium
No
No
 1.5.0 14.03.2025 SB2025032580
#VU65745 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31082		 CWE-89 Medium
No
No
 1.0.2 25.07.2022 SB2022072515
#VU128155 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31062		 CWE-22 Medium
Available
No
 1.0.2 20.06.2022 SB2022072515