Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-32312

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue has been fixed in version 11.0.7.

VectorNETWORK

PublishedMay 19, 2026, 00:16

Published Bysecurity-advisories@github.com

Base Score

Score4.3

Affected Versions

No affected versions found.

References

https://github.com/glpi-project/glpi/releases/tag/11.0.7
https://github.com/glpi-project/glpi/security/advisories/GHSA-cg63-qchq-q626

Weakness Type

CWE-862

CVSS Metrics

Base Score

5.1

Vector String

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Base SeverityMedium

Version

4.0

Attack Vector (AV)

NETWORK