Medium severityNVD Advisory· Published Sep 25, 2026· Updated Sep 25, 2026
CVE-2026-55217
CVE-2026-55217
Description
GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged authenticated user can create, update, or delete knowledge base comments and translations without the required authorization for the affected content. This issue is fixed in versions 11.0.8 and 10.0.26.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 0.85 - 10.0.26, 11.0.8
Patches
Vulnerability mechanics
References
5- github.com/glpi-project/glpi/commit/1cbf69b99dfd0610f1c03a3f245f3b248e1bfde0nvd
- github.com/glpi-project/glpi/commit/9c29f25bd09eca9e62ca50c52b3ebd15b02997b2nvd
- github.com/glpi-project/glpi/releases/tag/10.0.26nvd
- github.com/glpi-project/glpi/releases/tag/11.0.8nvd
- github.com/glpi-project/glpi/security/advisories/GHSA-xm3v-3g6q-g9q8nvd
News mentions
0No linked articles in our index yet.