CVE-2026-32312

MediumCVSS 4.3

Published: 19/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

GLPI (free asset and IT management software) versions 11.0.0 through 11.0.6 contain a vulnerability that allows an authenticated user with forms READ permission to export the structure of unauthorized forms.

Risk Assessment

A user can access sensitive form structure data they should not have access to, potentially leading to information disclosure.

Recommendation

Upgrade GLPI to version 11.0.7 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue has been fixed in version 11.0.7.