High severityNVD Advisory· Published Jun 2, 2026· Updated Jun 4, 2026

CVE-2026-40108

Description

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, a technician can store an XSS payload in a ITIL costs. This issue has been fixed in version 11.0.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Glpi Project/Glpillm-fuzzy
Range: 11.0.0 - 11.0.6

Patches

Vulnerability mechanics

References

github.com/glpi-project/glpi/security/advisories/GHSA-rhmv-j773-4gvhnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000