CVE-2026-42318
GLPI Vulnerable to Arbitrary Item Deletion via Planning Endpoint
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User's planning.
| CWE | CWE-862 |
| Vendor | glpi-project |
| Product | glpi |
| Published | Jun 3, 2026 |
| Last Updated | Jun 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for glpi-project glpi
Be the first to know when new unknown vulnerabilities affecting glpi-project glpi are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
glpi-project / glpi
>= 11.0.0, < 11.0.7 >= 9.5.0, < 10.0.25