Multiples vulnérabilités dans GLPI (27 juillet 2026)
Multiple vulnerabilities have been discovered in GLPI, including potential for privilege escalation, data integrity compromise, and SQL injection. These vulnerabilities affect GLPI versions prior to 11.0.8 and 10.0.26. Users are advised to consult the provided security advisories for available patches and mitigations.
A security advisory from CERT-FR details multiple vulnerabilities within the GLPI monitoring and management platform. These vulnerabilities could allow an attacker to elevate privileges, compromise data integrity, and exploit SQL injection flaws. Specifically, GLPI versions prior to 11.0.8 and 10.0.26 are impacted. The advisory lists several CVE identifiers, including CVE-2026-47678, CVE-2026-47679, CVE-2026-52848, CVE-2026-53610, CVE-2026-53625, CVE-2026-53629, and CVE-2026-55214. CERT-FR recommends referring to the linked security advisories for detailed information and available patches. These advisories provide a comprehensive list of affected versions and recommended remediation steps. The vulnerabilities highlight a need for immediate attention from GLPI administrators to ensure system security.