CVE-2023-46726

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server configuration form can be used to execute arbitrary code previously uploaded as a GLPI document. Version 10.0.11 contains a patch for the issue.

• CWE-74

• https://github.com/glpi-project/glpi/commit/42ba2b031bec0b3889317db25f3adf9080fc11b2Patch
• https://github.com/glpi-project/glpi/releases/tag/10.0.11Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-qc92-gxc6-5f95Third Party Advisory
• https://github.com/glpi-project/glpi/commit/42ba2b031bec0b3889317db25f3adf9080fc11b2Patch
• https://github.com/glpi-project/glpi/releases/tag/10.0.11Release Notes
• https://github.com/glpi-project/glpi/security/advisories/GHSA-qc92-gxc6-5f95Third Party Advisory

Published

Dec 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46720A stack-based buffer overflow in Fortinet FortiOS version 7.…7.8
• CVE-2023-46721Rejected reason: Not used
• CVE-2023-46722The Pimcore Admin Classic Bundle provides a backend UI for P…6.1
• CVE-2023-46723lte-pic32-writer is a writer for PIC32 devices. In versions …7.5
• CVE-2023-46724Squid is a caching proxy for the Web. Due to an Improper Val…7.5
• CVE-2023-46725FoodCoopShop is open source software for food coops and loca…7.5
• CVE-2023-46727GLPI is a free asset and IT management software package. Sta…9.8
• CVE-2023-46728Squid is a caching proxy for the Web supporting HTTP, HTTPS,…7.5
• CVE-2023-46729sentry-javascript provides Sentry SDKs for JavaScript. An un…6.1
• CVE-2023-4673Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-46730Group-Office is an enterprise CRM and groupware tool. In aff…8.8
• CVE-2023-46731XWiki Platform is a generic wiki platform offering runtime s…9.8