Поиск уязвимостей
Количество 5
Количество 5
CVE-2026-49470
GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password verification endpoint does not limit failed submissions per user. An attacker who has obtained a user's primary authentication credentials can repeatedly submit TOTP values against the MFA verification flow, making brute-force compromise of the second factor and subsequent account takeover possible. This issue is fixed in version 11.0.8.
CVE-2026-49470
GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password verification endpoint does not limit failed submissions per user. An attacker who has obtained a user's primary authentication credentials can repeatedly submit TOTP values against the MFA verification flow, making brute-force compromise of the second factor and subsequent account takeover possible. This issue is fixed in version 11.0.8.
CVE-2026-49470
GLPI is a free asset and IT management software package. From 11.0.0 u ...
ROS-20261109-80-0186
Уязвимость glpi
ROS-20261109-73-0187
Уязвимость glpi
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-49470 GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password verification endpoint does not limit failed submissions per user. An attacker who has obtained a user's primary authentication credentials can repeatedly submit TOTP values against the MFA verification flow, making brute-force compromise of the second factor and subsequent account takeover possible. This issue is fixed in version 11.0.8. | 0% Низкий | около 2 месяцев назад | |
 | CVE-2026-49470 GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password verification endpoint does not limit failed submissions per user. An attacker who has obtained a user's primary authentication credentials can repeatedly submit TOTP values against the MFA verification flow, making brute-force compromise of the second factor and subsequent account takeover possible. This issue is fixed in version 11.0.8. | 0% Низкий | около 2 месяцев назад | |
| CVE-2026-49470 GLPI is a free asset and IT management software package. From 11.0.0 u ... | 0% Низкий | около 2 месяцев назад | |
 | ROS-20261109-80-0186 Уязвимость glpi | CVSS3: 7.5 | 0% Низкий | 4 дня назад |
| ROS-20261109-73-0187 Уязвимость glpi | CVSS3: 7.5 | 0% Низкий | 4 дня назад |
Уязвимостей на страницу