CVE-2026-47678 | glpi-project Glpi up to 10.0.25/11.0.7 Dropdown Values Fetching Endpoint sql injection

A vulnerability was found in glpi-project Glpi up to 10.0.25/11.0.7. It has been classified as critical. Affected by this issue is some unknown functionality of the component Dropdown Values Fetching Endpoint. Performing a manipulation results in sql injection.

This vulnerability is cataloged as CVE-2026-47678. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More