CVE-2026-22821

Description

mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4.

PUBLISHED Reserved 2026-01-09 | Published 2026-02-12 | Updated 2026-02-12 | Assigner GitHub_M

Problem types

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

References

github.com/...orting/security/advisories/GHSA-24q7-h59q-33w8

github.com/...ommit/6f4a3caf9c1f7bbed1d910795d6e918d039f1f72

cve.org (CVE-2026-22821)

nvd.nist.gov (CVE-2026-22821)

Download JSON