← Volver al buscador de CVEs

CVE-2026-40877

Combodo iTop

Descripción

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3.

CVSS 8.7EPSS 0.318%Riesgo 0.89
Ver fuente
Publicación
2026-08-24 19:16:38
Versiones afectadas
<3.2.3
Tipo
Aplicación web
Última modificación
2026-08-27 17:18:22
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N