CVE-2026-26027 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload through the inventory en…
High CVSS: 7.5

CVE-2026-26027

GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload through the inventory endpoint. This vulnerability is fixed in 11.0.6.
Vendor
Glpi-project
Product
Glpi
CWE
CWE-79
Yayın Tarihi
2026-04-06 15:17:07
Güncelleme
2026-04-07 16:02:54
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Glpi HIGH Glpi-project 2026

Referanslar

https://github.com/glpi-project/glpi/security/advisories/GHSA-chch-wcm9-f9cp