Critical Vulnerabilities Discovered in GLPI Software by CERT-FR

Multiple vulnerabilities were discovered in GLPI on 22 July 2026, as reported by the French government’s CERT (CERT-FR). These flaws enable attackers to compromise data confidentiality, integrity, and bypass security policies. The notice specifies no CVE identifiers, technical details, or affected versions. The impacts include unauthorized data access, tampering, and circumvention of security controls. No specific threat actors, attack vectors, or mitigation steps are provided in the advisory.