agentprime: glpiEvery new CVE for glpi.https://agentprime.io/CVE-2026-53631: GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feedshttps://agentprime.io/advisories/CVE-2026-53631/https://agentprime.io/advisories/CVE-2026-53631/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:25:40 GMTCVECVE-2026-47678: GLPI: Blind Time based SQLI in dropdownshttps://agentprime.io/advisories/CVE-2026-47678/https://agentprime.io/advisories/CVE-2026-47678/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:24:08 GMTCVECVE-2026-52848: GLPI: MFA bypasshttps://agentprime.io/advisories/CVE-2026-52848/https://agentprime.io/advisories/CVE-2026-52848/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:21:48 GMTCVEcriticalCVE-2026-57152: GLPI: Unallowed notifications sendinghttps://agentprime.io/advisories/CVE-2026-57152/https://agentprime.io/advisories/CVE-2026-57152/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:20:55 GMTCVECVE-2026-121559: GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloninghttps://agentprime.io/advisories/CVE-2026-121559/https://agentprime.io/advisories/CVE-2026-121559/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:17:15 GMTCVECVE-2026-108726: GLPI through 12.0.0 Missing Authorization via ajax/map.phphttps://agentprime.io/advisories/CVE-2026-108726/https://agentprime.io/advisories/CVE-2026-108726/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 12:19:35 GMTCVECVE-2026-53629: GLPI: SQL injection in history tabhttps://agentprime.io/advisories/CVE-2026-53629/https://agentprime.io/advisories/CVE-2026-53629/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:38:43 GMTCVECVE-2026-53626: GLPI: Arbitrary Document Read via Form Context Authorization Bypasshttps://agentprime.io/advisories/CVE-2026-53626/https://agentprime.io/advisories/CVE-2026-53626/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:37:53 GMTCVECVE-2026-48482: GLPI: RCE via Form importhttps://agentprime.io/advisories/CVE-2026-48482/https://agentprime.io/advisories/CVE-2026-48482/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:37:10 GMTCVEcriticalCVE-2026-53625: GLPI: Privilege Escalation via authtype API manipulationhttps://agentprime.io/advisories/CVE-2026-53625/https://agentprime.io/advisories/CVE-2026-53625/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:35:36 GMTCVECVE-2026-53610: GLPI: Reflected XSS in dashboardshttps://agentprime.io/advisories/CVE-2026-53610/https://agentprime.io/advisories/CVE-2026-53610/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:34:43 GMTCVECVE-2026-47679: GLPI: arbitrary file deletionhttps://agentprime.io/advisories/CVE-2026-47679/https://agentprime.io/advisories/CVE-2026-47679/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:33:55 GMTCVECVE-2026-55214: GLPI: Stored XSS in suppliershttps://agentprime.io/advisories/CVE-2026-55214/https://agentprime.io/advisories/CVE-2026-55214/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:33:03 GMTCVECVE-2026-49470: GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Forcehttps://agentprime.io/advisories/CVE-2026-49470/https://agentprime.io/advisories/CVE-2026-49470/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:30:55 GMTCVECVE-2026-55217: GLPI: Unallowed modfication of knowbase items comments and translationshttps://agentprime.io/advisories/CVE-2026-55217/https://agentprime.io/advisories/CVE-2026-55217/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:29:28 GMTCVECVE-2026-53628: GLPI: Unallowed authentication method update by administratorhttps://agentprime.io/advisories/CVE-2026-53628/https://agentprime.io/advisories/CVE-2026-53628/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:28:25 GMTCVECVE-2026-45801: GLPI: Unauthorized Debug Mode Activation via Profile Update (Privilege Escalation)https://agentprime.io/advisories/CVE-2026-45801/https://agentprime.io/advisories/CVE-2026-45801/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:27:33 GMTCVECVE-2026-53627: GLPI: Unexpected access to update operations through the APIhttps://agentprime.io/advisories/CVE-2026-53627/https://agentprime.io/advisories/CVE-2026-53627/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:26:37 GMTCVECVE-2026-49469: GLPI: LDAP filter injection in user import featurehttps://agentprime.io/advisories/CVE-2026-49469/https://agentprime.io/advisories/CVE-2026-49469/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:25:43 GMTCVECVE-2026-13490: glpi-project glpi Document document.send.php canViewFile authorizationhttps://agentprime.io/advisories/CVE-2026-13490/https://agentprime.io/advisories/CVE-2026-13490/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 Jun 2026 11:00:05 GMTCVECVE-2026-42321: GLPI has stored XSS in asset lockshttps://agentprime.io/advisories/CVE-2026-42321/https://agentprime.io/advisories/CVE-2026-42321/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 15:25:17 GMTCVECVE-2026-42320: GLPI vulnerable to arbitrary file accesshttps://agentprime.io/advisories/CVE-2026-42320/https://agentprime.io/advisories/CVE-2026-42320/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 15:23:46 GMTCVECVE-2026-42318: GLPI Vulnerable to Arbitrary Item Deletion via Planning Endpointhttps://agentprime.io/advisories/CVE-2026-42318/https://agentprime.io/advisories/CVE-2026-42318/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 15:17:16 GMTCVECVE-2026-42317: GLPI vulnerable to arbitrary files deletion by technicianhttps://agentprime.io/advisories/CVE-2026-42317/https://agentprime.io/advisories/CVE-2026-42317/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 15:16:02 GMTCVECVE-2026-44281: GLPI vulnerable to unauthorized reading of a specific asset objecthttps://agentprime.io/advisories/CVE-2026-44281/https://agentprime.io/advisories/CVE-2026-44281/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 14:06:12 GMTCVECVE-2026-40108: GLPI Vulnerable to Stored XSS in ITIL Costshttps://agentprime.io/advisories/CVE-2026-40108/https://agentprime.io/advisories/CVE-2026-40108/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 23:02:35 GMTCVECVE-2026-5385: GLPI 11.0.0 - Stored XSS in knowledge basehttps://agentprime.io/advisories/CVE-2026-5385/https://agentprime.io/advisories/CVE-2026-5385/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 18:32:01 GMTCVECVE-2026-32312: GLPI: Unauthorized export of form structurehttps://agentprime.io/advisories/CVE-2026-32312/https://agentprime.io/advisories/CVE-2026-32312/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2026 23:46:26 GMTCVECVE-2026-29047: GLPI has an Authenticated SQL Injection via log exportshttps://agentprime.io/advisories/CVE-2026-29047/https://agentprime.io/advisories/CVE-2026-29047/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:39:15 GMTCVECVE-2026-26263: GLPI has an Unauthenticated SQL Injection via Search enginehttps://agentprime.io/advisories/CVE-2026-26263/https://agentprime.io/advisories/CVE-2026-26263/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:36:57 GMTCVECVE-2026-26027: GLPI has an Unauthenticated Stored XSS via inventoryhttps://agentprime.io/advisories/CVE-2026-26027/https://agentprime.io/advisories/CVE-2026-26027/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:35:53 GMTCVECVE-2026-26026: GLPI has a Server-Side Template Injection via Double-Compilationhttps://agentprime.io/advisories/CVE-2026-26026/https://agentprime.io/advisories/CVE-2026-26026/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.12 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:33:05 GMTCVEcriticalCVE-2026-25932: GLPI has Stored XSS in Supplier 'Website' fieldhttps://agentprime.io/advisories/CVE-2026-25932/https://agentprime.io/advisories/CVE-2026-25932/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 14:31:02 GMTCVECVE-2026-25937: GLPI has a MFA bypasshttps://agentprime.io/advisories/CVE-2026-25937/https://agentprime.io/advisories/CVE-2026-25937/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 23:16:38 GMTCVECVE-2026-25936: GLPI Vulnerable to Authenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2026-25936/https://agentprime.io/advisories/CVE-2026-25936/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 19:41:32 GMTCVECVE-2026-22248: GLPI affected by Remote Code Execution via malicious uploadhttps://agentprime.io/advisories/CVE-2026-22248/https://agentprime.io/advisories/CVE-2026-22248/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 15:27:04 GMTCVECVE-2026-22044: GLPI is Vulnerable to Authenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2026-22044/https://agentprime.io/advisories/CVE-2026-22044/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 17:15:39 GMTCVECVE-2026-23624: GLPI is vulnerable to session stealing on externally authenticated user changehttps://agentprime.io/advisories/CVE-2026-23624/https://agentprime.io/advisories/CVE-2026-23624/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 17:15:33 GMTCVECVE-2026-22247: GLPI is Vulnerable to SSRF via Webhookshttps://agentprime.io/advisories/CVE-2026-22247/https://agentprime.io/advisories/CVE-2026-22247/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 17:10:30 GMTCVECVE-2025-66417: GLPI has an unauthenticated SQL injection through the inventory endpointhttps://agentprime.io/advisories/CVE-2025-66417/https://agentprime.io/advisories/CVE-2025-66417/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Jan 2026 16:25:03 GMTCVECVE-2025-64516: GLPI incorrectly authorizes access to documentshttps://agentprime.io/advisories/CVE-2025-64516/https://agentprime.io/advisories/CVE-2025-64516/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Jan 2026 16:01:03 GMTCVECVE-2023-53943: GLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpointhttps://agentprime.io/advisories/CVE-2023-53943/https://agentprime.io/advisories/CVE-2023-53943/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 19:53:36 GMTCVECVE-2025-64520: GLPI vulnerable to unauthorized access to restricted Knowledge Base items through the APIhttps://agentprime.io/advisories/CVE-2025-64520/https://agentprime.io/advisories/CVE-2025-64520/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Dec 2025 21:59:02 GMTCVECVE-2025-59935: GLPI Vulnerable to Unauthenticated Stored XSS on the Inventory pagehttps://agentprime.io/advisories/CVE-2025-59935/https://agentprime.io/advisories/CVE-2025-59935/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Dec 2025 16:34:46 GMTCVECVE-2025-53105: GLPI permits unauthorized rules execution orderhttps://agentprime.io/advisories/CVE-2025-53105/https://agentprime.io/advisories/CVE-2025-53105/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 14:40:36 GMTCVECVE-2025-53357: GLPI permits reservation modification by unauthorized usershttps://agentprime.io/advisories/CVE-2025-53357/https://agentprime.io/advisories/CVE-2025-53357/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 14:17:58 GMTCVECVE-2025-53113: GLPI technicians can access unauthorized information through external linkshttps://agentprime.io/advisories/CVE-2025-53113/https://agentprime.io/advisories/CVE-2025-53113/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 14:16:36 GMTCVECVE-2025-53112: GLPI's incomprehensive permission checks can lead to data removal from allowed usershttps://agentprime.io/advisories/CVE-2025-53112/https://agentprime.io/advisories/CVE-2025-53112/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 14:15:22 GMTCVECVE-2025-53111: GLPI exposes data to non-allowed usershttps://agentprime.io/advisories/CVE-2025-53111/https://agentprime.io/advisories/CVE-2025-53111/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 14:14:25 GMTCVECVE-2025-53008: GLPI's MailCollector Receiver is vulnerable to credential exfiltrationhttps://agentprime.io/advisories/CVE-2025-53008/https://agentprime.io/advisories/CVE-2025-53008/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 14:09:58 GMTCVE