#GLPI
O TI reativo vive em um ciclo vicioso. Cada "incêndio" apagado às pressas: soluções temporárias, se tornarão o combustível do próximo incêndio. Leia nosso artigo completo:
TI Reativo vs. Proativo: O Paradoxo do 'herói apagador de incêndios' e o risco para a empresa
Chega de ser o 'herói apagador de incêndios'. Aprenda o mapa do TI Proativo. Use Zabbix, GLPI e Shell Script para prever falhas, automatizar e agregar valor estratégico à empresa.
dlvr.it
September 29, 2026 at 11:47 AM
4. Vulns : MongoDB, noyau Linux (Ubuntu/Debian/Red Hat/SUSE), GitLab, GLPI… et MongoDB exposé : 16 000+ bases Supabase mal configurées (PII, tokens) accessibles. https://www.bleepingcomputer.com/news/security/misconfigured-supabase-apps-expose-data-in-over-16-000-databases/
September 29, 2026 at 5:57 AM
📦 glpi-project/phpstan-glpi 1.4.0

PHPStan rules for GLPI.

🔗 https://github.com/glpi-project/phpstan-glpi
September 28, 2026 at 3:00 PM
[Backport release-26.05] glpi-agent: 1.19 -> 1.20

https://github.com/NixOS/nixpkgs/pull/567587

#security
September 27, 2026 at 9:07 PM
September 27, 2026 at 6:38 PM
I am going through audio of a Which Side?: A Protest Music Teach-Out show a couple of months ago, getting ready to treat you to some awesome video. At the August show, Eric Martin performed this gem, which I didn't know was a protest song. But it is. www.youtube.com/watch?v=glpI...
Cilla Black - Alfie (Live)
YouTube video by CillaBlackVEVO
www.youtube.com
September 26, 2026 at 5:17 PM
CVE-2026-48482 - glpi
Versions 11.0.0 through 11.0.7 of the GLPI IT management tool let a user with form‑admin rights upload a specially crafted image that is saved outside the intended folder. This can…

Too many irrelevant or confusing CVEs? Use stackflag.com

#glpi #glpiproject #CVE #infosec
CVE-2026-48482: GLPI: RCE via Form import
GLPI is a free asset and IT management software package.
stackflag.com
September 26, 2026 at 3:30 PM
CVE-2026-53625 - glpi
In GLPI versions up to 10.0.26 and 11.0.8, a technician can use the API to alter another user's login type, even a super‑admin's. This could let the technician take over that account.…

Too many irrelevant or confusing CVEs? Use stackflag.com

#glpi #glpiproject #CVE #infosec
CVE-2026-53625: GLPI: Privilege Escalation via authtype API manipulation
GLPI is a free asset and IT management software package.
stackflag.com
September 26, 2026 at 3:20 PM
CVE-2026-53610 - glpi
Versions of GLPI from 11.0.0 through 11.0.8 allow a specially‑made web address to display content that the attacker supplies. If a user clicks that link, the malicious content can…

Too many irrelevant or confusing CVEs? Use stackflag.com

#glpi #glpiproject #CVE #infosec
CVE-2026-53610: GLPI: Reflected XSS in dashboards
GLPI is a free asset and IT management software package.
stackflag.com
September 26, 2026 at 3:20 PM
CVE-2026-55214 - glpi
In GLPI versions 11.0.6 through 11.0.8, a logged‑in technician can place hidden code in the supplier information fields. When any user opens the supplier list for that item, the hidden…

Too many irrelevant or confusing CVEs? Use stackflag.com

#glpi #glpiproject #CVE #infosec
CVE-2026-55214: GLPI: Stored XSS in suppliers
GLPI is a free asset and IT management software package.
stackflag.com
September 26, 2026 at 3:10 PM
2026年09月26日の重要脆弱性: Mediawiki、GLPI、MCMSなど3件

本日公開されたMediawiki、GLPI、MCMSの重要脆弱性3件について、OSコマンドインジェクションやRCEの危険性があるため、早急な確認と対応が求められます。
2026年09月26日の重要脆弱性: Mediawiki、GLPI、MCMSなど3件
本日公開されたMediawiki、GLPI、MCMSの重要脆弱性3件について、OSコマンドインジェクションやRCEの危険性があるため、早急な確認と対応が求められます。
vuln.devops-digest.com
September 26, 2026 at 5:45 AM
🚨 CVE-2026-48482 — CVSS 9.4 CRITICAL

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can...

🔎 https://stemshop.top/cve/CVE-2026-48482

#CVE #CyberSecurity #InfoSec
September 25, 2026 at 8:07 PM
🚨 EUVD-2026-87282
📊 7.7/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password verification endpoint does not li...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87282

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:06 PM
🚨 EUVD-2026-87283
📊 8.5/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier we...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87283

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:04 PM
🚨 EUVD-2026-87285
📊 7.5/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker can craft a URL for a dashboard that reflects attacker...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87285

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:03 PM
🚨 EUVD-2026-87287
📊 9.4/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form import with a crafted illustrati...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87287

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:03 PM
🚨 EUVD-2026-87288
📊 7.1/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain conditions, permission logic can grant access to a d...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87288

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:03 PM
🚨 EUVD-2026-87289
📊 7.1/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87289

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:03 PM
🚨 EUVD-2026-87280
📊 5.3/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged authenticated user can create, update, ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87280

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:02 PM
🚨 EUVD-2026-87284
📊 8.5/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87284

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:02 PM
🚨 EUVD-2026-87286
📊 7.5/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through t...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87286

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 8:01 PM
🚨 EUVD-2026-87272
📊 4.6/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner or technician can submit craft...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87272

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 7:01 PM
🚨 EUVD-2026-87273
📊 6.0/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API (v2) to pe...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87273

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 7:01 PM
🚨 EUVD-2026-87274
📊 5.3/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an authenticated user without the required permission ca...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87274

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 7:01 PM
🚨 EUVD-2026-87275
📊 5.9/10
🏢 glpi-project

📝 GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding the Update auth and sync or Upd...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87275

#cybersecurity #infosec #cve #euvd
September 25, 2026 at 7:01 PM