CVE-2026-44281

EUVD-2026-34102
GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0.7, an authenticated user with config READ permission can read a specific asset object. Upgrade to 11.0.7 or 10.0.25 to receive a patch.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 16.27%
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
glpi
jammy
dne
noble
dne
questing
dne
resolute
dne
xenial
needs-triage