https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:58:57.028605+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-53625 CVE-2026-53625 — GLPI: Privilege Escalation via authtype API manipulation 2026-09-30T23:58:57.030600+00:00

Affected: glpi-project glpi

GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through the API to change another user's authentication method. Under configurations using the legacy API REST interface or SSO logins, this can change a super-administrator's authentication method and enable account takeover. This issue is fixed in versions 11.0.8 and 10.0.26.