Important: GLPI security update
Type/Severity
NetEye Product Security has rated this update as having a high security impact.
Topic
An update for the glpi packages is now available for NetEye 4.
Security Fix for NetEye 4.48
10.0.26_neteye1.19.1-1
Summary
The vulnerabilities include two SQL injections, an Arbitrary file deletion, a Privilege Escalation via authtype API manipulation, an Unauthorized debug mode activation, an LDAP filter injection, an Unallowed authentication method update by administrator, an Unallowed modification of knowbase items comments and translations, and an Unallowed notifications sending.
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Affected Products
All NetEye 4.x versions
References
- https://neteye.guide/current/security-policy/bugfix-policy.html#severity-levels
- https://github.com/glpi-projeandct/glpi/releases/tag/10.0.26
Gabriele Bocchi
Software Engineer - IT System & Service Management Solutions at Würth IT Italy
Author
Latest posts by Gabriele Bocchi
27. 03. 2026
Automation, Development, DevOps, NetEye
From Private to Public: Building a Secure GitHub Organization