https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:09:32 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-0935 certfr-2026-avi-0935 https://db.gcve.eu/vuln/certfr-2026-avi-0935 https://db.gcve.eu/vuln/fkie_cve-2026-47679 <p>GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions 11.0.8 and 10.0.26.</p> <p>GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions 11.0.8 and 10.0.26.</p> https://db.gcve.eu/vuln/fkie_cve-2026-47679 https://db.gcve.eu/vuln/ubuntu-cve-2026-47679 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glpi</p> <p>GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions 11.0.8 and 10.0.26.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: glpi</p> <p>GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions 11.0.8 and 10.0.26.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-47679