VulnSocial

CVE-2026-26001Disclosure(glpi-project / glpi_inventory)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch glpi-project glpi_inventory systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitized user input can lend to an SQL injection from reports, with adequate rights. This vulnerability is fixed in 1.6.6.

glpi-project CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • glpi_inventory

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-03-18); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
glpi-project
Products
glpi_inventory

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-03-18: 3Mentions · 2026-03-19: 1Patch / Workaround · 2026-03-18: 2Technical Details · 2026-03-18: 303-1803-19
Signal classification3 categories
Disclosure
250.0%
Patch
125.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-03-183
Disclosure2Patch1
2026-03-191
General1
Full discourse4 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-26001 📊 Severity: 7.1 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-26001 #CVE-2026-26001 #CVE #High  #CyberSecurity #InfoSec https://t.co/YDt4gOqXK9

    Post summary

    A tweet announcing the new CVE-2026-26001, providing its severity rating but lacking detailed exploitation information, fixes, or technical specifics.

    0000040
    104 followersView on X
  • Fernando Karl@fernandokarl
    Patch

    🚨 Atenção, profissionais de segurança! O plugin GLPI Inventory (antes da v1.6.6) possui uma vulnerabilidade de SQL Injection. Atualize agora para v1.6.6 e revise as permissões. Proteja seus dados! 🔒 Saiba mais: https://www.tenable.com/cve/CVE-2026-26001 #Cybersecurity #SQLInjection #GLPI

    Post summary

    The post highlights a SQL Injection flaw in the GLPI Inventory plugin prior to v1.6.6 and advises upgrading to v1.6.6 as the patch solution.

    0000045
    258 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-26001 SQL Injection in GLPI Inventory Plugin Before Version 1.6.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26001

    Post summary

    The message announces a SQL injection vulnerability (CVE-2026-26001) affecting GLPI Inventory Plugin versions prior to 1.6.6, without providing PoC, exploit code, or patch details.

    0000036
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26001 The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, non sanitized user input can… https://www.cve.org/CVERecord?id=CVE-2026-26001

    Post summary

    The entry announces CVE‑2026‑26001, describing unsanitized user input in the GLPI Inventory Plugin and indicating that upgrading to version 1.6.6 resolves the issue.

    00000133
    56.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appglpi-projectglpi_inventory---

Explore more

Back to dashboardglpi-project CVEsglpi_inventory vulnerabilities