PT-2026-25776 · Pluginsglpi · Fields

Login-Securite · Published 2026-03-16 · Updated 2026-03-16 · CVE-2026-23489

X.com · 0Daypublishing

CVSS v3.1

9.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

🚨 CVE-2026-23489: Fields GLPI plugin vulnerable to...

PHP code injection through dropdown creation in GLPI Fields plugin - privileged users can drop shells via form field ma...

https://t.co/wqtxi9kCiW

#netsec #vulnerability #CVE #sysadmin #zeroday

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-23489

Affected Products

Fields

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-23489 · Security Note
• https://github.com/pluginsGLPI/fields/security/advisories/GHSA-rj7q-mmx9-fhq7 · Note
• https://github.com/pluginsGLPI/fields/releases/tag/1.23.3 · Note
• https://twitter.com/0dayPublishing/status/2033595181023351241 · Twitter Post