Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass MFA and steal their account. Version 11.0.6 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-18 | 2 | Disclosure2 |
| 2026-03-19 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-25937 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-25937 #CVE-2026-25937 #CVE #Medium #CyberSecurity #InfoSec https://t.co/YK1x5G1ynL
Post summary
The post simply alerts to CVE-2026-25937 with its severity score and a reference link, without providing any technical details, exploit information, or mitigation guidance.
CVE-2026-25937 Multi-Factor Authentication Bypass in GLPI 11.0.0 Through 11.0.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25937
Post summary
The tweet announces CVE‑2026‑25937, outlining a multi‑factor authentication bypass affecting GLPI versions 11.0.0 to 11.0.5, but offers no exploit code or remediation guidance.
CVE-2026-25937 GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credenti… https://www.cve.org/CVERecord?id=CVE-2026-25937
Post summary
The notice outlines CVE-2026-25937, noting that GLPI versions 11.0.0‑11.0.6 allow attackers who know a user’s credentials to exploit the software; no PoC, patch, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | teclib-edition | glpi | - | - | - |