CVE-2025-32786

—

CVSS 3.1

7.5 high

EPSS

7%p93

Published

Nov 4, 2025 (Nov 4, 2025)

Modified

Jun 17, 2026

Description

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1.

Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (6.6%)

In the news0 stories

No ingested article mentions this CVE yet.