CVE-2026-42320

NONE
CVSS v3
CVSS v2
0.04% EPSS (exploit probability)
CWE-862CWE

Description

GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 10.0.25 and 11.0.7, a technician can read arbitrary files inside the GLPI_DOC_DIR. Upgrade to 10.0.25 or 11.0.7 to receive a patch.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references