Vulnerabilities CVE-2026-42318

CVE-2026-42318

High

Open

TLP:CLEAR

GLPI Vulnerable to Arbitrary Item Deletion via Planning Endpoint

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User's planning.

Details

CVSS Score: 7.0
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jun 3, 2026
Last Modified: Aug 21, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.