Glpi · Glpi · CVE-2026-22248
**Name of the Vulnerable Software and Affected Versions**
GLPI versions 11.0.0 through 11.0.4
**Description**
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated technician user can upload a malicious file and trigger its execution through an unsafe PHP instantiation.
**Recommendations**
Update GLPI to version 11.0.5 or later.