glpi-project security advisories
4 threat alerts tracking vulnerabilities and security advisories that affect glpi-project products.
Vulnios monitors glpi-project CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent glpi-project security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2026-26026 — glpi-project — glpi
GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6.
criticalCVE-2026-26026Critical Vulnerability: CVE-2017-11184 — glpi-project — glpi
SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.
criticalCVE-2017-11184Critical Vulnerability: CVE-2017-11474 — glpi-project — glpi
GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.
criticalCVE-2017-11474Critical Vulnerability: CVE-2017-11329 — glpi-project — glpi
GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.
criticalCVE-2017-11329
Track glpi-project exposure across your environment
Vulnios automatically cross-references your asset inventory against new glpi-project CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan