CVE-2026-32312 : faille moyenne glpi-project glpi (CVSS 4.3)

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue has been fixed in version 11.0.7.

Sévérité

Moyenne (CVSS 4.3)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitation active

Non signalée par la CISA

Publication

19 mai 2026

Dernière mise à jour

24 juil. 2026

• glpi-project glpi

• Fiche CVE-2026-32312 sur le NVD (NIST)
• github.com/glpi-project/glpi/releases/tag/11.0.7
• github.com/glpi…