How many CVEs have patched Config?

3 published CVEs changed Config in Combodo/iTop, in 3 distinct patches totalling 40 changed lines, between 2022 and 2026.

What is the latest CVE that changed Config?

CVE-2026-34948 (Combodo iTop: Access control bypass via OQL joins), published 2026-08-21, changed lines 1733 to 1740 of core/config.class.inc.php.

How does Config compare to the rest of Combodo/iTop?

Combodo/iTop has 39 CVEs with a located fix in total; 3 of them changed Config.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

Combodo/iTop

Class

Config

Name: Config in Combodo/iTop: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

core/config.class.inc.php

Last patched August 21, 2026

3

CVEs

That changed this function

3

Distinct patches

Backports counted once

40

Lines changed

Added plus removed

2022–2026

Years

By CVE publication date

Overview

Config in Combodo/iTop was changed by 3 published CVE fixes between 2022 and 2026, in 3 distinct patches that added or removed 40 lines in total.

Combodo/iTop has 39 CVEs with a located fix in total, so 8% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed Config, newest first, with the lines each fix touched.

Combodo iTop: Access control bypass via OQL joins
CVE-2026-34948 · lines 1733–1740 · +16 −0 in 2 hunks
High · CVSS 7.7
EPSS 0.4%2026-08-21
Combodo iTop: Authentication bypass in exec.php allows PHP file execution
CVE-2026-34741 · lines 1741–1748 · +16 −0 in 2 hunks
High · CVSS 8.6
EPSS 0.6%2026-08-21
CVE-2022-24811
CVE-2022-24811 · lines 1164–1171 ·

+8 −0

Medium · CVSS 5.4

EPSS 0.7%2022-04-05

Get an alert when the next CVE fix lands in Combodo/iTop, with the patched functions.

Monitor iTop CVEs

Other hotspots in the repository

Functions in Combodo/iTop changed by the most CVE fixes.

ShowExamples2 CVEs · pages/run_query.php ForgotPwdGo2 CVEs · application/loginwebpage.class.inc.php DownloadDocument2 CVEs · core/ormdocument.class.inc.php HandleForm2 CVEs · datamodels/2.x/itop-portal-base/portal/src/Helper/ObjectFormHandlerHelper.php DisplayNavigatorGroupTab2 CVEs · pages/UI.php FromJSON1 CVEs · datamodels/2.x/itop-portal-base/portal/src/Form/ObjectFormManager.php

All patched functions in Combodo/iTop

Frequently asked questions

Common questions about CVE fixes to Config.

How many CVEs have patched Config?: 3 published CVEs changed Config in Combodo/iTop, in 3 distinct patches totalling 40 changed lines, between 2022 and 2026.
What is the latest CVE that changed Config?: CVE-2026-34948 (Combodo iTop: Access control bypass via OQL joins), published 2026-08-21, changed lines 1733 to 1740 of core/config.class.inc.php.
How does Config compare to the rest of Combodo/iTop?: Combodo/iTop has 39 CVEs with a located fix in total; 3 of them changed Config.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track Combodo/iTop CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing