CVE-2025-24799: GLPI is a free asset and IT management software package. An

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18.

• EPSS 86.8% (99.7% percentile)
• CVSS 7.5 high

Related briefings

• Ransomware crew appears to be writing its wipers with AI 2026-09-17

Linked threat actors

• The Gentlemen machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions