Threats tagged 'ghsa-r7x3-2pgh-h4g2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-121559GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows High8.62026-11-03GCVE DatabaseCVE-2026-121559 GLPI versions 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contain a privilege escalation vulnerability. Authenticated users with the Technician profile can clone Super-Admin accounts, gaining elevated privileges without proper permission checks. This occurs because the cloning function copies all profile and group assignments indiscriminately. Report on CVE-2026-121559 Vulnerability CWE-269 #ghsa-r7x3-2pgh-h4g2	GCVE Database	2026-11-03

Page 1 of 1