Skip to content
OpenAdvisories

Product · GLPI

glpi-inventory-plugin

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-26001

    GLPI Inventory Plugin has SQL Injection on dropdown_calendar Report

    The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitized user input can lend to an SQL injection from reports, with adequate rights. This vulnerability is fixed in …

    GLPI glpi-inventory-plugin
  • High 7.5
    CVE-2025-32786

    GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection

    The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1.

    GLPI glpi-inventory-plugin
  • High 8.2
    CVE-2025-27147

    GLPI Inventory plugin has Improper Access Control Vulnerability

    The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory (SNMP), software deployment, VMWare ESX host remote inventory, and data collection (files, Windows registry, WMI). Versions prior to 1.5.0 have…

    GLPI glpi-inventory-plugin