https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T06:49:16.735774+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-57152 CVE-2026-57152 — GLPI: Unallowed notifications sending 2026-11-08T06:49:16.738483+00:00

Affected: glpi-project glpi

GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from 11.0.0 until 11.0.8, under certain conditions, GLPI permission logic could grant a user access to a document without confirming that the document was linked to the targeted item. This could expose the file to a user who should not be able to view it. This issue is fixed in versions 10.0.26 and 11.0.8.