CVE-2026-55217

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-55217
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55217.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-55217
Aliases
  • GHSA-xm3v-3g6q-g9q8
Published
2026-09-25T18:29:28Z
Modified
2026-09-27T03:47:32Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
GLPI: Unallowed modfication of knowbase items comments and translations
Details

GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged authenticated user can create, update, or delete knowledge base comments and translations without the required authorization for the affected content. This issue is fixed in versions 11.0.8 and 10.0.26.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-285"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55217.json"
}
References

Affected packages

Git / github.com/glpi-project/glpi

Affected ranges

Type
GIT
Repo
https://github.com/glpi-project/glpi
Events
Introduced
b094bc0c617761d6e7eee900950f24cea658d560
Introduced
b5cb4adb3c350521d85209d49e29e8619cdf8316
Fixed
17b6d8de504deb8fa14825a86824f0f1cac9e10d
Fixed
1056d00af818ad2a99e3009a21a9db8c724ddc53
Fixed
1cbf69b99dfd0610f1c03a3f245f3b248e1bfde0
Fixed
9c29f25bd09eca9e62ca50c52b3ebd15b02997b2
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0.85"
        },
        {
            "fixed":  "10.0.26"
        },
        {
            "introduced":  "11.0.0"
        },
        {
            "fixed":  "11.0.8"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

11.*
11.0.0
11.0.1
11.0.2
11.0.3
11.0.4
11.0.5
11.0.6
11.0.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55217.json"