grokability snipe-it vulnerabilities

Newest CVEs

• CVE-2026-116201

  Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

  grokability · snipe-it

  High8.7
• CVE-2026-116200

  Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

  grokability · snipe-it

  High8.2
• CVE-2026-116199

  Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback

  grokability · snipe-it

  Critical9.2
• CVE-2026-116198

  Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store

  grokability · snipe-it

  Medium5.3
• CVE-2026-114064

  Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

  grokability · snipe-it

  Medium5.1
• CVE-2026-62368

  Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

  grokability · snipe-it

  High8.1
• CVE-2026-63493

  Snipe-IT: 2FA bypass via the API token flow

  grokability · snipe-it

  High8.6
• CVE-2026-63498

  Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

  grokability · snipe-it

  High8.7
• CVE-2026-88894

  Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout

  grokability · snipe-it

  Medium5.3
• CVE-2026-86774

  Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

  grokability · snipe-it

  Medium5.3