Teclib Edition maintains a modest portfolio of open-source IT asset management and security tools, including GLPI (a widely deployed IT service management platform), Fields configuration management, and Armadito antivirus, which serve organizations across infrastructure operations and endpoint protection. The vendor's vulnerability disclosures center on application-layer issues characteristic of web-based and system management software, reflecting the input-handling and integration complexity of these tools. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Teclib Edition over time
Signals from CVEs in this vendor scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-10232CRITICAL Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php. | Mar 27, 2019 | 9.8 | 53 | NO | YES |
CVE-2021-43779CRITICAL GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Exe | Jan 5, 2022 | 9.9 | 36 | NO | NO |
CVE-2026-23489CRITICAL Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowe | Mar 16, 2026 | 9.1 | 31 | NO | NO |
CVE-2019-12723CRITICAL An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via container_id and old_order parameters to ajax/reorder.php by an unauthentica | Jul 10, 2019 | 9.8 | 30 | NO | NO |
CVE-2019-10231CRITICAL Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php). | Mar 27, 2019 | 9.8 | 30 | NO | NO |
CVE-2026-25936HIGH GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, an authenticated user can perfom a SQL injection. Version 11.0.6 fi | Mar 17, 2026 | 8.8 | 29 | NO | NO |
CVE-2026-22248HIGH GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. From 11.0.0 to before 11.0.5, an | Mar 11, 2026 | 8.8 | 29 | NO | NO |
CVE-2026-25937MEDIUM GLPI is a free Asset and IT management software package. Starting in version 11.0.0 and prior to version 11.0.6, a malicious actor with knowledge of a user's credentials can bypass | Mar 18, 2026 | 6.5 | 23 | NO | NO |
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames containing pure UTF-16 characters can bypass detection. The user | Feb 21, 2018 | 3.3 | 23 | NO | YES |
CVE-2019-12724MEDIUM An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $_POST['name'] parameter. | Jul 10, 2019 | 6.1 | 21 | NO | NO |
Signals from CVEs in this vendor scope (13 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Teclib Edition.
Media articles that mention a CVE ID that affects a product developed by Teclib Edition — matched by CVE ID, not by vendor name.