CVE-2026-53626— GLPI: Arbitrary Document Read via Form Context Authorization Bypass
Quick assessment
Affected
glpi-project glpi
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GLPI 是一款免费的资产与 IT 管理软件套件。在版本 11.0.5 至 11.0.8 之间，在特定条件下，权限逻辑可能会在未确认文档是否与目标项目关联的情况下，授予用户对文档的访问权限。用户可利用其有权查看的无关项目，读取与无法访问的项目相关联的文档。该问题已在 11.0.8 版本中修复。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-53626
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GLPI: Arbitrary Document Read via Form Context Authorization Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain conditions, permission logic can grant access to a document without confirming that the document is linked to the targeted item. A user can use an unrelated item that the user is permitted to view to read a document linked to an inaccessible item. This issue is fixed in version 11.0.8.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| glpi-project | glpi | >= 11.0.5, < 11.0.8 | - |
|
II. Public POCs for CVE-2026-53626
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53626
请登录查看更多情报信息。
Other References for CVE-2026-53626 (3)
-
https://github.com/glpi-project/glpi/releases/tag/11.0.8 x_refsource_MISC
-
https://github.com/glpi-project/glpi/security/advisories/GHSA-q9rc-v6vm-q5mm x_refsource_CONFIRM
Same Patch Batch · glpi-project · 2026-09-25 · 13 CVEs total
| CVE-2026-48482 | 9.4 CRITICAL | GLPI: RCE via Form import |
| CVE-2026-47679 | 8.5 HIGH | GLPI: arbitrary file deletion |
| CVE-2026-55214 | 8.5 HIGH | GLPI: Stored XSS in suppliers |
| CVE-2026-49470 | 7.7 HIGH | GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Fo |
| CVE-2026-53625 | 7.5 HIGH | GLPI: Privilege Escalation via authtype API manipulation |
| CVE-2026-53610 | 7.5 HIGH | GLPI: Reflected XSS in dashboards |
| CVE-2026-53629 | 7.1 HIGH | GLPI: SQL injection in history tab |
| CVE-2026-53627 | 6.0 MEDIUM | GLPI: Unexpected access to update operations through the API |
| CVE-2026-53628 | 5.9 MEDIUM | GLPI: Unallowed authentication method update by administrator |
| CVE-2026-45801 | 5.3 MEDIUM | GLPI: Unauthorized Debug Mode Activation via Profile Update (Privilege Escalation) |
| CVE-2026-55217 | 5.3 MEDIUM | GLPI: Unallowed modfication of knowbase items comments and translations |
| CVE-2026-49469 | 4.6 MEDIUM | GLPI: LDAP filter injection in user import feature |
IV. Related Vulnerabilities
Same weakness: CWE-639
-
CVE-2026-82323
Improper Authorization in Enocta Educational's Enocta Platfo -
CVE-2026-82348
Apache Roller: Cross-weblog resource tampering via unscoped -
CVE-2026-100897
fuzui StudentInfo Password Change Endpoint moditypasswordstu -
CVE-2026-100885
Krayin laravel-crm admin-config-setup API Endpoint CanInstal -
CVE-2026-101084
obot before v0.21.1 Authorization Bypass via /mcp-connect
V. Comments for CVE-2026-53626
No comments yet