CVE-2026-22821

Impact

mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/pluginsGLPI/mreporting/commit/6f4a3caf9c1f7bbed1d910795d6e918d039f1f72
• https://github.com/pluginsGLPI/mreporting/security/advisories/GHSA-24q7-h59q-33w8