Grokability Snipe-IT

• CVE-2026-86733 High 7.2 Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore 0.6%
• CVE-2026-85617 High 8.8 snipe-it before 8.6.3 Authorization Bypass via Bulk Delete 0.5%
• CVE-2026-85616 High 8.5 Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance 0.4%
• CVE-2026-84206 Medium 4.3 Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore 0.4%
• CVE-2026-55694 High 7.1 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover 0.3%
• CVE-2026-55643 High 7.6 Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode 0.3%
• CVE-2026-55703 Medium 4.3 Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET 0.3%
• CVE-2026-61807 Medium 6.3 Snipe-IT: Stored DOM XSS via table selected-count IDs 0.2%
• CVE-2026-55519 Medium 5.4 Snipe-IT: Improper Authorization in File Deletion (IDOR) 0.4%
• CVE-2026-55482 Medium 6.3 Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update 0.3%
• CVE-2026-55483 Medium 4.9 Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation 0.4%
• CVE-2026-50550 Medium 5.8 Snipe-IT: 2FA reset privilege bypass 0.3%
• CVE-2026-49870 Medium 5.9 Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor` 0.4%
• CVE-2026-49976 Medium 6.5 Snipe-IT: User Account Escalation via CSV Import 0.5%
• CVE-2026-19579 Medium 5.4 Snipe-IT Checkout Request Cancellation IDOR 0.3%
• CVE-2026-55481 Medium 6.2 Snipe-IT: CSS Injection via `header_color` Setting 0.3%
• CVE-2026-55475 Medium 5.7 Snipe-IT: Import created_by can be overwritten 0.3%
• CVE-2026-55469 Medium 6.5 Snipe-IT: Path traversal vulnerability via CSV import `image` field 0.6%
• CVE-2026-55461 Medium 6.1 Snipe-IT: Open Redirect After User Edit 0.3%
• CVE-2026-55479 Medium 5.3 Snipe-IT: Incorrect permission for legacy license checkin API 0.3%
• CVE-2026-55452 Medium 4.8 Snipe-IT: CSV formula injection in Activity Report export 0.4%
• CVE-2026-55466 Medium 6.2 Snipe-IT: Stored XSS via inline-served attachment 0.4%
• CVE-2026-55515 Medium 5.0 Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint 0.3%
• CVE-2026-55462 Medium 4.3 Snipe-IT: Authorization bypass on print inventory page 0.3%
• CVE-2026-55464 Medium 4.8 Snipe-IT: Stored XSS via Markdown custom field 0.3%
• CVE-2026-55460 High 7.1 Snipe-IT: Authorization bypass on bulk editing users 0.4%
• CVE-2026-55472 Medium 4.3 Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation 0.3%
• CVE-2026-55476 Medium 5.3 Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter 0.3%
• CVE-2026-55478 Medium 5.3 Snipe-IT: Missing object-level authorization in Kits API 0.3%
• CVE-2026-55843 High 7.0 Snipe-IT: Improper Privilege Management 0.5%
• CVE-2026-55516 High 7.7 Snipe-IT: Cross-company asset maintenance re-parenting via API update 0.4%
• CVE-2026-55474 High 7.1 Snipe-IT: Directory traversal in displaySig 0.5%
• CVE-2026-54329 High 8.5 Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API 0.4%
• CVE-2026-48492 Medium 4.9 Snipe-IT's selectlist visibility is too permissive 0.4%
• CVE-2026-55542 Low 1.3 Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL 0.3%
• CVE-2026-48493 Medium 5.5 Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment 0.3%
• CVE-2026-48507 High 7.1 Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users 0.2%
• CVE-2026-44833 Medium 5.9 Snipe-IT: Open redirect vulnerability 0.2%
• CVE-2026-44832 High 8.7 Snipe-IT: Privilege Escalation via API Permissions Assignment 0.3%
• CVE-2026-44831 Medium 4.8 Snipe-IT: XSS vulnerability in component notes 0.2%