Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Glpi-project CVE-2026-57152
GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from 11.0.0 until 11.0.8, under certain conditions, GLPI permission logic c
0 CVEs and 0 credit lines.
-
Glpi-project CVE-2026-53631
GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 until 11.0.9, any authenticated user could submit a crafted req
0 CVEs and 0 credit lines.
-
Glpi-project CVE-2026-52848
GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenticated user could use a crafted URL to sk
0 CVEs and 0 credit lines.
-
Glpi-project CVE-2026-47678
GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, any authenticated user can submit crafted values to the dropdown v
0 CVEs and 0 credit lines.
-
Glpi-project CVE-2026-121559
GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows authenticated users to obtain elevated profiles b
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Glpi-project glpi-project-2026-10
Glpi-project Security Releases - October 2026
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit