Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-16 | 3 | Disclosure2Patch1 |
| 2026-03-17 | 1 | Disclosure1 |
| 2026-09-13 | 1 | Exploit1 |
| 2026-09-14 | 1 | PoC1 |
GLPI Fields Plugin'deki CVE-2026-23489 CVSS 9.1 Critical RCE açığını hedefleyen PoC yayınlandı. Fields Plugin ≤1.23.2 etkileniyor. https://github.com/eorll-lgtm/poc-CVE-2026-23489
Post summary
A proof‑of‑concept for CVE‑2026‑23489, a critical RCE in the GLPI Fields Plugin (≤1.23.2), has been released and linked publicly, but there is no evidence of active exploitation or an accompanying patch.
🔴 CVE-2026-23489 - Critical Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to cr... https://www.thehackerwire.com/vulnerability/CVE-2026-23489/ https://t.co/j1vSKZh2AG
Post summary
The post announces CVE-2026-23489, noting that a GLPI plugin version prior to 1.23.3 permits arbitrary PHP code execution. No PoC, exploit code, or patch information is provided.
[CVE-2026-23489: CRITICAL] GLPI Fields plugin pre-1.23.3 allows execution of arbitrary PHP code by users creating dropdowns, impacting cybersecurity. Update to patch this critical vulnerability.#cve,CVE-2026-23489,#cybersecurity https://cvefind.com/CVE-2026-23489
Post summary
The GLPI Fields plugin before version 1.23.3 permits arbitrary PHP code execution when users create dropdowns; applying the patch resolves this critical issue.
🚨 CVE-2026-23489: Fields GLPI plugin vulnerable to... PHP code injection through dropdown creation in GLPI Fields plugin - privileged users can drop shells via form field ma... https://zerodaysignal.com/vulnerability/CVE-2026-23489 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
This post announces the discovery of a PHP code injection vulnerability (CVE-2026-23489) in the GLPI Fields plugin that could allow privileged users to drop shells via a form field, but no PoC, exploit code, patch, or active exploitation is reported.
GLPI “Fields” Plugin Remote Code Execution: Exploit Code Now Public for CVE-2026-23489 https://cybrmonk.com/blog/glpi-fields-plugin-remote-code-execution-exploit-code-now-public-for-cve-2026-23489 #cybersecurity #threatintelligence https://t.co/DcmveEGmSL
Post summary
The text announces that public exploit code is now available for CVE-2026-23489, a Remote Code Execution vulnerability in the GLPI Fields Plugin, pointing to a blog post with further details.
CVE-2026-23489 Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users t… https://www.cve.org/CVERecord?id=CVE-2026-23489
Post summary
CVE-2026-23489 discloses that the GLPI Fields plugin (pre‑v1.23.3) permits arbitrary PHP code execution via custom fields, but no PoC, exploit code, active attacks, or patch information are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | teclib-edition | fields | - | glpi | - |