Question 1

What is CVE-2026-52848 — CVE-2026-52848?

Accepted Answer

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenticated user could use a crafted URL to skip one-time-password verification, defeating two-factor authentication. This issue is fixed in version 11.0.8.

Question 2

What is the authoritative source for CVE-2026-52848?

Accepted Answer

CVE-2026-52848 (CVE-2026-52848) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-52848CVE-2026-52848

Description

Scoring