CVE-2026-45801

GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an authenticated user without the required permission can enable debug mode. The affected user-setting update does not enforce the privilege boundary intended to restrict debug-mode activation. This issue is fixed in versions 11.0.8 and 10.0.26.

• CWE-269

• https://github.com/glpi-project/glpi/commit/e9d8765122aafda5c61eba33bcbd8323569c8a53
• https://github.com/glpi-project/glpi/commit/fb72d60cfc0e155f8f7707f0a2398bd5f17d7071
• https://github.com/glpi-project/glpi/releases/tag/10.0.26
• https://github.com/glpi-project/glpi/releases/tag/11.0.8
• https://github.com/glpi-project/glpi/security/advisories/GHSA-3vhr-7p54-cqhw

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45796Coder allows organizations to provision remote development e…6.5
• CVE-2026-45797HeyForm is an open-source form builder. Prior to version 3.0…6.4
• CVE-2026-45798Wazuh is a free and open source platform used for threat pre…7.5
• CVE-2026-45799Wire provides gRPC and protocol buffers for Android, Kotlin,…7.5
• CVE-2026-4580A security flaw has been discovered in code-projects Simple …9.8
• CVE-2026-45800Vvveb is a powerful and easy to use CMS with page builder to…8.7
• CVE-2026-45802FPDI is a collection of PHP classes that facilitate reading …6
• CVE-2026-45803`gh` is GitHub’s official command line tool. From 1.6.0 to b…3.5
• CVE-2026-45804Diffusers is the a library for pretrained diffusion models. …7.5
• CVE-2026-45805Penpot is an open-source design tool for design and code col…8.8
• CVE-2026-45806Penpot is an open-source design tool for design and code col…7.7
• CVE-2026-45807Kestra is an open-source, event-driven orchestration platfor…7.7