CVE Intelligence

Vulnerabilidades do Glpi-project Glpi Inventory

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Glpi-project Glpi Inventory: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:glpi-project:glpi_inventory

CVE-2026-26001 Alta · 8.8 CWE-89 17/03/2026
GLPI Inventory Plugin has SQL Injection on dropdown_calendar Report
The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitized user input can lend to an SQL injection from reports, with adequate rights. This vulnerability is fixed in 1.6.6.
CVE-2026-25590 Média · 6.1 CWE-79 03/03/2026
GLPI Inventory Plugin has Reflected XSS in task jobs
The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a reflected XSS vulnerability in task jobs. This vulnerability is fixed in 1.6.6.