🔓 CVEs & KEV
CVE-2026-48482 — glpi-project glpi — CVSS 9.4 — GLPI: RCE via Form importGLPI is a free asset and IT management software pack...
CVE-2026-97063 — yzcheng90 X-SpringBoot — CVSS 9.3 — X-SpringBoot through 6
CVE-2026-42322 — Piwigo — CVSS 9.1 — Piwigo Arbitrary File Upload Leads to Authenticated RCE (CVE-2026-42322)
CVE-2026-47679 — glpi-project glpi — CVSS 8.5 — GLPI: arbitrary file deletionGLPI is a free asset and IT management software ...
CVE-2026-55214 — glpi-project glpi — CVSS 8.5 — GLPI: Stored XSS in suppliersGLPI is a free asset and IT management software ...
CVE-2026-49470 — glpi-project glpi — CVSS 7.7 — GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover...
CVE-2026-53625 — glpi-project glpi — CVSS 7.5 — GLPI: Privilege Escalation via authtype API manipulationGLPI is a free asset ...
CVE-2026-53610 — glpi-project glpi — CVSS 7.5 — GLPI: Reflected XSS in dashboardsGLPI is a free asset and IT management softw...
CVE-2026-53629 — glpi-project glpi — CVSS 7.1 — GLPI: SQL injection in history tabGLPI is a free asset and IT management soft...
CVE-2026-53626 — glpi-project glpi — CVSS 7.1 — GLPI: Arbitrary Document Read via Form Context Authorization BypassGLPI is a ...
CVE-2026-53627 — glpi-project glpi — CVSS 6.0 — GLPI: Unexpected access to update operations through the APIGLPI is a free as...
📋 ADVISORIES
- 📄 Source for Elementor WordPress CSRF flaw lets attackers create admin accounts on up to 2M sites — wordpress.org