Vulnerabilidades do Glpi-project Glpi-inventory-plugin

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Glpi-project Glpi-inventory-plugin: 3 registro(s), com versões afetadas e correções.

CVE-2026-26001 Alta · 8.8 CWE-89 17/03/2026

GLPI Inventory Plugin has SQL Injection on dropdown_calendar Report

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitized user input can lend to an SQL injection from reports, with adequate rights. This vulnerability is fixed in 1.6.6.

CVE-2026-25590 Média · 6.1 CWE-79 03/03/2026

GLPI Inventory Plugin has Reflected XSS in task jobs

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a reflected XSS vulnerability in task jobs. This vulnerability is fixed in 1.6.6.

CVE-2025-32786 Alta · 7.5 CWE-89 04/11/2025

GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1.