A vulnerability was found in GLPI up to 10.0.22. It has been declared as critical. Affected by this issue is some unknown functionality. Such manipulation leads to sql injection.

This vulnerability is listed as CVE-2026-22044. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.