Skip to content
OpenAdvisories

Vendor

GLPI

193 known vulnerabilities.

Products

glpi 180 glpi-inventory-plugin 7 glpi-agent 3 GLPI Product 2 Reports plugin for GLPI 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-26026 Public exploit EPSS 12%

    GLPI has a Server-Side Template Injection via Double-Compilation

    GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. This vulnerability is fixed in 11.0.6.

    GLPI glpi
  • Critical 9.8
    CVE-2022-31061 Public exploit EPSS 51%

    SQL injection on login page in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are r…

    GLPI glpi glpi Ubuntu
  • Critical 9.8
    CVE-2022-31056 Public exploit

    SQL injection with _actor parameter in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the actor fields. This issue…

    GLPI glpi glpi Ubuntu