https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:34:15.167030+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-04043 bdu:2025-04043 2026-10-06T20:34:15.232160+00:00 bdu:2025-04043 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0162 certfr-2025-avi-0162 — De multiples vulnérabilités ont été découvertes dans GLPI. Elles permettent à un attaquant de provoquer une atteinte à… 2026-10-06T20:34:15.232210+00:00 certfr-2025-avi-0162 https://cve.radiocsirt.org/vuln/euvd-2026-218968 EUVD-2026-218968 2026-10-06T20:34:15.232242+00:00 EUVD-2026-218968 https://cve.radiocsirt.org/vuln/fkie_cve-2025-21626 fkie_cve-2025-21626 2026-10-06T20:34:15.232266+00:00

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the `status.php` endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the `status.php` file, restrict its access, or remove any sensitive values from the `name` field of the active LDAP directories, mail servers authentication providers and mail receivers.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-21626 UBUNTU-CVE-2025-21626 2026-10-06T20:34:15.232299+00:00

Affected: Ubuntu:16.04:LTS: glpi

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the `status.php` endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the `status.php` file, restrict its access, or remove any sensitive values from the `name` field of the active LDAP directories, mail servers authentication providers and mail receivers.