https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:29:21.701411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05704 bdu:2026-05704 2026-10-06T15:29:21.782113+00:00 bdu:2026-05704 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1117 certfr-2025-avi-1117 — De multiples vulnérabilités ont été découvertes dans GLPI. Elles permettent à un attaquant de provoquer une injection d… 2026-10-06T15:29:21.782156+00:00 certfr-2025-avi-1117 https://cve.radiocsirt.org/vuln/euvd-2026-263654 EUVD-2026-263654 2026-10-06T15:29:21.782177+00:00 EUVD-2026-263654 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59935 fkie_cve-2025-59935 2026-10-06T15:29:21.782189+00:00

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-59935 UBUNTU-CVE-2025-59935 2026-10-06T15:29:21.782218+00:00

Affected: Ubuntu:16.04:LTS: glpi

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch.