CVE-2026-53629 Scanner
CVE-2026-53629 Scanner - SQL Injection vulnerability in GLPI
Used 3.5k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-53629
7.1
CVSShigh
Exploitable remotely over the internet · low-privilege account sufficient.
Description
GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. This issue is fixed in versions 11.0.8 and 10.0.26.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
glpi
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: glpi
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →