G
Vendor security profile
glpi-project
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs16
Critical1
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
1
1
0
0
13
1
CVE KEV
CVE severity distribution
16toplam CVE
Critical1 (6%)
High8 (50%)
Medium7 (44%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%6
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
5.3
CVE-2026-108726
GLPI through 12.0.0 Missing Authorization via ajax/map.php
G
Patch status unknown
7.1
CVE-2026-53629
GLPI: SQL injection in history tab
G
Patch status unknownEPSS %1
7.1
CVE-2026-53626
GLPI: Arbitrary Document Read via Form Context Authorization Bypass
G
Patch status unknownEPSS %0
9.4
CVE-2026-48482
GLPI: RCE via Form import
G
Patch status unknownEPSS %0
7.5
CVE-2026-53625
GLPI: Privilege Escalation via authtype API manipulation
G
Patch status unknownEPSS %1
7.5
CVE-2026-53610
GLPI: Reflected XSS in dashboards
G
Patch status unknownEPSS %0
8.5
CVE-2026-47679
GLPI: arbitrary file deletion
G
Patch status unknownEPSS %0
8.5
CVE-2026-55214
GLPI: Stored XSS in suppliers
G
Patch status unknownEPSS %0
7.7
CVE-2026-49470
GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Force
G
Patch status unknownEPSS %0
5.3
CVE-2026-55217
GLPI: Unallowed modfication of knowbase items comments and translations
G
Patch status unknownEPSS %0