CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,496 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,496
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product glpi_project:glpi. Show all products

14 CVEs, showing 1 to 14
CVESeverityTitlePublished
CVE-2026-49469Medium 4.6GLPI: LDAP filter injection in user import feature
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-53627Medium 6.0GLPI: Unexpected access to update operations through the API
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-45801Medium 5.3GLPI: Unauthorized Debug Mode Activation via Profile Update (Privilege Escalation)
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-53628Medium 5.9GLPI: Unallowed authentication method update by administrator
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-55217Medium 5.3GLPI: Unallowed modfication of knowbase items comments and translations
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-49470High 7.7GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Force
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-55214High 8.5GLPI: Stored XSS in suppliers
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-47679High 8.5GLPI: arbitrary file deletion
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-53610High 7.5GLPI: Reflected XSS in dashboards
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-53625High 7.5GLPI: Privilege Escalation via authtype API manipulation
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-48482Critical 9.4GLPI: RCE via Form import
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-53626High 7.1GLPI: Arbitrary Document Read via Form Context Authorization Bypass
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-53629High 7.1GLPI: SQL injection in history tab
Assigned by GitHub_M
Sep 25, 2026
CVE-2026-108726Medium 4.3GLPI through 12.0.0 Missing Authorization via ajax/map.php
Assigned by VulnCheck
Oct 11, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.