CVE-2026-128078 | glpi-project GLPI up to 10.0.26/11.0.8 ITIL Permission Check improper authorization

November 13, 2026 Yanac

A vulnerability described as problematic has been identified in glpi-project GLPI up to 10.0.26/11.0.8. The impacted element is an unknown function of the component ITIL Permission Check. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-128078. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More