Skip to content
Threat Feed
Subscribe

Product

Fields Plugin

1 brief RSS
high threat

Remote Code Execution in GLPI Fields Plugin (CVE-2026-23489)

CVE-2026-23489 is a blind remote code execution vulnerability in the GLPI Fields plugin (<= 1.23.2) that allows authenticated attackers to execute arbitrary PHP code via the dropdown-generation feature.

exploited Fields Plugin remote-code-execution web-application-vulnerability
1r 2t 1c