https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:46:20.678403+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-23046 CVE-2025-23046 — GLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin 2026-10-06T18:46:20.680670+00:00

Affected: glpi-project glpi

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth authorization has already been established. Version 10.0.18 contains a patch. As a workaround, one may disable any "Mail servers" authentication provider configured to use an Oauth connection provided by the OauthIMAP plugin.