CVE-2026-25936: Teclib-Edition GLPI

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, an authenticated user can perfom a SQL injection. Version 11.0.6 fixes the issue.

Affected products

• Teclib-Edition GLPI: after 11.0.0, up to and including 11.0.6

Published 2026-03-17. Last modified 2026-06-17.