GGrokability

Products

Exploited and recent CVEs

• CVE-2026-116201 High 8.8 Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition 0.3%
• CVE-2026-116200 Medium 5.9 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() 0.2%
• CVE-2026-116199 High 8.1 Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback 0.3%
• CVE-2026-116198 Medium 4.3 Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store <0.1%
• CVE-2026-114064 Medium 5.5 Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint 0.4%
• CVE-2026-62368 High 8.1 Snipe-IT: Stored XSS via Custom Field name in asset-list column headers 0.4%
• CVE-2026-63493 High 8.6 Snipe-IT: 2FA bypass via the API token flow 0.3%
• CVE-2026-63498 High 8.7 Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API 0.2%
• CVE-2026-88894 Medium 5.4 Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout 0.3%
• CVE-2026-86774 Medium 6.3 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy 0.3%
• CVE-2026-86773 Medium 5.4 Snipe-IT 8.6.3 Broken Access Control via Kit Update Endpoints 0.2%
• CVE-2026-86772 Medium 5.4 Snipe-IT 8.6.3 Stored XSS via Department Names 0.3%
• CVE-2026-86771 High 7.6 Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num 0.3%
• CVE-2026-86770 High 8.1 Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation 0.6%
• CVE-2026-86769 Medium 4.3 Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout 0.3%
• CVE-2026-86768 Medium 5.4 Snipe-IT before 8.7.0 Improper Input Validation via API Checkout 0.3%
• CVE-2026-86767 Medium 5.0 Snipe-IT before 8.7.0 Cross-Company Read via requested-assets 0.3%
• CVE-2026-86766 Medium 6.5 Snipe-IT 8.6.3 Race Condition via Consumable Checkout 0.3%
• CVE-2026-86765 Medium 6.5 Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint 0.4%
• CVE-2026-86764 Medium 6.5 Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components 0.4%
• CVE-2026-86763 Low 3.5 snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer 0.3%
• CVE-2026-86762 High 8.1 Snipe-IT before 8.7.0 Authentication Bypass via API Middleware 0.5%
• CVE-2026-86761 Medium 4.3 snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints 0.4%
• CVE-2026-86760 Medium 5.4 snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag 0.4%
• CVE-2026-86759 High 7.1 Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer 0.4%
• CVE-2026-86758 Medium 6.5 Snipe-IT before 8.7.0 License Key Exposure via CSV Export 0.4%
• CVE-2026-86757 Medium 6.5 Snipe-IT before 8.7.0 Information Disclosure via Custom Fields 0.4%
• CVE-2026-86756 Medium 6.1 Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState 0.3%
• CVE-2026-86755 Medium 5.4 Snipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuth 0.3%
• CVE-2026-86754 High 7.3 Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients 0.3%