CVE-2026-26026 — GLPI Form Dropdown SSTI PoC

Authenticated SSTI → RCE exploit for CVE-2026-26026 (GLPI 11.0.0–11.0.5).

Full write-up: https://www.bzhunt.fr/blog/cve_glpi/

Usage

python3 POC_GLPI_Form_Dropdown_SSTI.py https://target.com \
    -u glpi -p 'glpi' --cmd 'id'

Requires an account with the form CREATE right (super-admin). Target must be GLPI ≤ 11.0.5 (patched in 11.0.6).

pip install requests