CVE-2026-40877 - Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-54721 [高危] CVE-2026-54721 - Silverstripe UserForms provides a visual form builder…
• CVE-2026-47727 [未知] CVE-2026-47727 - Trilium is an open-source hierarchical note-taking ap…
• CVE-2026-81719 [高危] CVE-2026-81719 - openssl_encrypt before 1.4.9 executes untrusted third…
• CVE-2026-81096 [危急] CVE-2026-81096 - ToolUniverse ran caller-supplied Python inside a sand…
• CVE-2026-19225 [中危] CVE-2026-19225 - The Defender Security WordPress plugin before 6.2.0 …
• CVE-2026-19223 [高危] CVE-2026-19223 - The Smush WordPress plugin before 4.3.2 does not res…
• CVE-2026-49845 [危急] CVE-2026-49845 - SQL injection in Hive Metastore direct SQL partition-…
• CVE-2026-40877 [高危] CVE-2026-40877 - Combodo iTop is a web-based IT service management too…