Teclib GLPI Remote Code Execution Vulnerability

概要

参考情報

• packetstormsecurity.com/files/169501/GLPI-10.0.2-Command-Injection.html · Exploit
• bioinformatics.org/phplabware/sourceer/sourceer.php · Patch
• Orange-Cyberdefense/CVE-repository · Third Party Advisory
• Orange-Cyberdefense/CVE-repository · Exploit
• glpi-project/glpi release · Release Notes
• glpi-project.org/fr/glpi-10-0-3-disponible · Release Notes
• mayfly277.github.io/posts/GLPI-htmlawed-CVE-2022-35914 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2022-35914

glpi のその他の脆弱性

• CVE-2026-32312中 4.3GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission…
• CVE-2026-29047高 8.8GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL i…
• CVE-2026-26263緊急 9.8GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated time-based blind SQL injection exi…
• CVE-2026-26027中 6.1GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload thro…
• CVE-2026-26026高 7.2GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. T…