Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-02 | 1 | Disclosure1 |
| 2026-06-09 | 1 | Disclosure1 |
| 2026-06-17 | 1 | General1 |
| 2026-06-21 | 1 | General1 |
| 2026-06-24 | 1 | Disclosure1 |
| 2026-07-03 | 1 | General1 |
| 2026-07-07 | 1 | General1 |
CVE-2026-5385 glpiの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/02/cve-2026-5385-glpi/ #IT #Security #cybersecurity
Post summary
The text is a brief Japanese headline linking to an article that promises a clear explanation and summary of countermeasures for CVE‑2026‑5385 affecting GLPI, but it provides no explicit details or actionable information.
CVE-2026-5385 glpiの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/07/02/cve-2026-5385-glpi/ #IT #Security #cybersecurity
Post summary
The text references a blog article detailing CVE‑2026‑5385 in GLPI but provides no substantive evidence of PoC, exploit code, active use, patch details, or technical specifics.
CVE-2026-5385 glpiの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-5385-glpi/ #IT #Security #cybersecurity
Post summary
The article provides an explanation of CVE‑2026‑5385 in GLPI, outlines its impact, and summarizes available countermeasures.
CVE-2026-5385 glpiの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-5385-glpi/ #IT #Security #cybersecurity
Post summary
The content appears to be a general explanatory article about CVE-2026-5385, lacking detailed technical data, PoC, exploitation, or patch information.
CVE-2026-5385 glpiの脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-5385-glpi/ #IT #Security #cybersecurity
Post summary
The content appears to be a general informational article about CVE-2026-5385 affecting GLPI, with no explicit mentions of PoC, exploit code, active exploitation, or patch details.
🚨 New zero-day in glpi | Detected by our AI SAST scanner and disclosed by Oscar Uribe. As a #CNA, we assigned the ID CVE-2026-5385. Details: 🔗 https://fluidattacks.com/advisories/mojabi. We have announced 238 #CVEs to this date: 🔗 https://fluidattacks.com/advisories/ https://t.co/lkhlFaE4AK
Post summary
The tweet announces the discovery of a new zero‑day vulnerability, CVE‑2026‑5385, in glpi, providing a link to an advisory but lacking details on exploitation or mitigations.
CVE-2026-5385 Stored Cross-Site Scripting in GLPI Knowledge Base Before 11.0.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5385 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces CVE‑2026‑5385, a stored XSS vulnerability in GLPI Knowledge Base versions prior to 11.0.7, and provides a link to further details, but offers no proof‑of‑concept, exploit code, patch information, or evidence of active exploitation.