https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 11:42:42 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0935 certfr-2026-avi-0935 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0935 https://vulnerability.circl.lu/vuln/fkie_cve-2026-53625 <p>GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through the API to change another user&#39;s authentication method. Under configurations using the legacy API REST interface or SSO logins, this can change a super-administrator&#39;s authentication method and enable account takeover. This issue is fixed in versions 11.0.8 and 10.0.26.</p> <p>GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through the API to change another user&#39;s authentication method. Under configurations using the legacy API REST interface or SSO logins, this can change a super-administrator&#39;s authentication method and enable account takeover. This issue is fixed in versions 11.0.8 and 10.0.26.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-53625