CVE-2025-64520Medium· 6.5▾ SunlitGLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a pa…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.
glpi >= 9.1.0, < 10.0.21Upgrade past the affected range:
glpi 10.0.21Connected by shared product, vendor, weakness, or advisory.
CVE-2026-53626High· 7.1GLPI is a free asset and IT management software package
CVE-2026-53627Medium· 6.0GLPI is a free asset and IT management software package
CVE-2026-53625High· 7.5GLPI is a free asset and IT management software package
CVE-2025-59935Medium· 6.5GLPI is a free asset and IT management software package
CVE-2026-49469Medium· 4.6GLPI is a free asset and IT management software package
CVE-2026-45801Medium· 5.3GLPI is a free asset and IT management software package