CVE-2026-11321— GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| pluginsGLPI | datainjection | 2.15.6< 2.15.7 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-11321
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import
Source: NVD (National Vulnerability Database)
Vulnerability Description
The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) concatenates user-supplied CSV field values directly into SQL queries during CSV import, without parameterization or escaping, resulting in authenticated SQL injection. An authenticated user with access to the Data injection feature can embed SQL expressions such as SLEEP() in a mapped field (for example Serial Number) to manipulate the generated query and extract database information via time-based blind injection.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| pluginsGLPI | datainjection | 2.15.6 ~ 2.15.7 | - |
II. Public POCs for CVE-2026-11321
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-11321
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-11321 (2)
- 🔗 Page not found · GitHub · GitHubvendor-advisory
Other References for CVE-2026-11321 (2)
IV. Related Vulnerabilities
Same vendor: pluginsGLPI
- CVE-2026-23489
Fields GLPI plugin vulnerable to RCE in dropdown generation - CVE-2026-22821
mreporting affected by a SQLI on date change - CVE-2025-65035
GLPI Database Inventory Plugin Vulnerable to Stored Object I - CVE-2025-53360
pluginsGLPI's Database Inventory Plugin allows any authentic - CVE-2025-27153
Escalade GLPI Plugin Vulnerable to Improper Access Control
Same weakness: CWE-89
- CVE-2026-15081
Location Selector - Critical - SQL Injection - SA-CONTRIB-20 - CVE-2026-13242
Geolocation Field - Critical - SQL Injection - SA-CONTRIB-20 - CVE-2026-47199
Frappe: check_safe_sql_query Permits SELECT INTO OUTFILE - CVE-2026-57230
OpenReplay: Authenticated ClickHouse SQL injection via sessi - CVE-2026-55405
LangChain4j: SQL injection via metadata filters in langchain
V. Comments for CVE-2026-11321
No comments yet