{"id":442498,"date":"2026-09-16T14:26:28","date_gmt":"2026-09-16T12:26:28","guid":{"rendered":"https:\/\/www.glpi-project.org\/?p=442498"},"modified":"2026-09-16T14:26:28","modified_gmt":"2026-09-16T12:26:28","slug":"new-versions-glpi-11-0-9-glpi-10-0-27","status":"publish","type":"post","link":"https:\/\/www.glpi-project.org\/en\/new-versions-glpi-11-0-9-glpi-10-0-27\/","title":{"rendered":"New versions GLPI 11.0.9 &amp; GLPI 10.0.27"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Two new GLPI versions are now available!<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We've just released <strong>GLPI 11.0.9<\/strong> and <strong>GLPI 10.0.27<\/strong> to patch several critical security vulnerabilities.<br>We strongly advise upgrading your instances as soon as possible!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>GLPI 11.0.9<\/strong> changelog: <a href=\"https:\/\/github.com\/glpi-project\/glpi\/milestone\/91?closed=1\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/glpi-project\/glpi\/milestone\/91?closed=1<\/a><br><strong>GLPI 10.0.27<\/strong> changelog: <a href=\"https:\/\/github.com\/glpi-project\/glpi\/milestone\/90?closed=1\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/glpi-project\/glpi\/milestone\/90?closed=1<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Get the updates here: <a href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/glpi-project\/glpi\/releases<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You will find below the list of security issues fixed in theses bugfixes versions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>[SECURITY - High 11.0] XSS via form illustration import<\/li>\n\n\n\n<li>[SECURITY - High 10.0 &amp; 11.0] Upload of malicious page on the web-server<\/li>\n\n\n\n<li>[SECURITY - High 10.0 &amp; 11.0] Unauthenticated SQL injection in planning feature<\/li>\n\n\n\n<li>[SECURITY - High 10.0 &amp; 11.0] Unexpected X509 authentication success with unverified certificated<\/li>\n\n\n\n<li>[SECURITY - High 10.0 &amp; 11.0] Race condition in marketplace allowing malicious plugin installation<\/li>\n\n\n\n<li>[SECURITY - Medium 10.0 &amp; 11.0] Unexpected access to followups\/tasks\/solutions generated from templates<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Important note:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Over the coming months, we will be increasing our release frequency to keep up with the current influx of security reports.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Like other popular open-source projects\u2014and with the rise of LLMs and agent-driven pentesting\u2014we have seen a significant surge in report volume. As an open-source project, we are doing our best to manage this wave efficiently and keep the platform secure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On your end, please expect security releases roughly every two weeks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We would like to thank all people who contributed to this new version and all those who contribute regularly to the GLPI project!<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/github.com\/glpi-project\/glpi\/releases\" target=\"_blank\" rel=\"noopener\">Download GLPI<\/a><\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Two new GLPI versions are now available! We've just released GLPI 11.0.9 and GLPI 10.0.27 to patch several critical security vulnerabilities.We strongly advise upgrading your instances as soon as possible! GLPI 11.0.9 changelog: https:\/\/github.com\/glpi-project\/glpi\/milestone\/91?closed=1GLPI 10.0.27 changelog: https:\/\/github.com\/glpi-project\/glpi\/milestone\/90?closed=1 Get the updates here: https:\/\/github.com\/glpi-project\/glpi\/releases You will find below the list of security issues fixed in theses bugfixes [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":442500,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[155],"tags":[],"class_list":["post-442498","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-versions"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/442498","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/comments?post=442498"}],"version-history":[{"count":6,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/442498\/revisions"}],"predecessor-version":[{"id":442558,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/posts\/442498\/revisions\/442558"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/media\/442500"}],"wp:attachment":[{"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/media?parent=442498"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/categories?post=442498"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.glpi-project.org\/en\/wp-json\/wp\/v2\/tags?post=442498"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}