Multiples vulnérabilités dans GLPI (22 juillet 2026)
Multiple vulnerabilities have been discovered in GLPI, allowing an attacker to compromise data confidentiality, data integrity, and bypass security policies. These vulnerabilities affect older versions of the system and are addressed through security updates.
Several vulnerabilities exist within GLPI, a system management and monitoring tool. These weaknesses could be exploited to gain unauthorized access to sensitive data and circumvent security controls. The CERT-FR bulletin highlights several specific CVEs associated with these issues.
Specifically, GLPI versions prior to 11.0.8 and 10.0.26 are affected. The vulnerabilities include CVE-2026-45801, CVE-2026-53627, CVE-2026-53628, and CVE-2026-55217. The security advisories linked in the bulletin provide detailed information about each vulnerability and recommended remediation steps. Users are advised to consult the linked bulletins for complete details and to apply the corresponding security updates immediately.