Vulnerabilities

GLPI is a free asset and IT management software package.

GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 until 11.0.9, any authenticated user could submit a crafted request to change the visibility of knowledge base items, reminders, or RSS feeds and then access content that should remain restricted. This issue is fixed in versions 10.0.27 and 11.0.9.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Glpi-Project

Product

glpi

CVSS v4.0

5.3 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Fix

available

Weakness

CWE-862

Exposure class

Network management

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-53631 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 35
   CVE NVD 23h ago

   GLPI is a free asset and IT management software package.

   CVSS 7.1 Fix available CVE-2026-57152 Glpi-Project
2. 43
   CVE NVD 23h ago

   GLPI is a free asset and IT management software package.

   CVSS 9.2 Fix available CVE-2026-52848 Glpi-Project
3. 35
   CVE NVD 23h ago

   GLPI is a free asset and IT management software package.

   CVSS 8.7 Fix available CVE-2026-47678 Glpi-Project