Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can perform SSRF request through the Webhook feature. This issue has been patched in version 11.0.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-22247 Server-Side Request Forgery (SSRF) Vulnerability in GLPI Webhook Feature 11.0.0-11.0.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22247
Post summary
A new SSRF vulnerability (CVE-2026-22247) affecting GLPI Webhook Feature 11.0.0-11.0.4 has been disclosed, with details available at vulmon.com.
CVE-2026-22247 GLPI is a free asset and IT management software package. From version 11.0.0 to before 11.0.5, a GLPI administrator can perform SSRF request through the Webhook featu… https://www.cve.org/CVERecord?id=CVE-2026-22247
Post summary
The text announces a new SSRF vulnerability (CVE‑2026‑22247) in GLPI’s webhook feature affecting versions 11.0.0 through 11.0.4.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | glpi-project | glpi | - | - | - |