https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:09:40.155946+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-49469 fkie_cve-2026-49469 2026-09-30T23:09:40.177895+00:00

GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner or technician can submit crafted criteria through the user import feature to bypass the configured default LDAP filter. This allows access to LDAP objects that the default filter was intended to exclude. This issue is fixed in versions 11.0.8 and 10.0.26.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-49469 UBUNTU-CVE-2026-49469 2026-09-30T23:09:40.177963+00:00

Affected: Ubuntu:16.04:LTS: glpi

GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner or technician can submit crafted criteria through the user import feature to bypass the configured default LDAP filter. This allows access to LDAP objects that the default filter was intended to exclude. This issue is fixed in versions 11.0.8 and 10.0.26.