grokability snipe-it
90 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-116201 | < 8.5.0 | Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition | HIGH 8.7 | 0.3 % | ||
| CVE-2026-116200 | < 8.6.3 | Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() | HIGH 8.2 | 0.2 % | ||
| CVE-2026-116199 | < 8.6.3 | Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback | CRITICAL 9.2 | 0.3 % | ||
| CVE-2026-116198 | < 8.7.0 | Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-114064 | < 8.7.0 | Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint | MEDIUM 5.1 | 0.3 % | ||
| CVE-2026-62368 | < 8.7.0 | Snipe-IT: Stored XSS via Custom Field name in asset-list column headers | HIGH 8.4 | 0.4 % | ||
| CVE-2026-63493 | < 8.7.0 | Snipe-IT: 2FA bypass via the API token flow | HIGH 8.6 | 0.3 % | ||
| CVE-2026-63498 | < 8.7.0 | Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API | HIGH 8.7 | 0.2 % | ||
| CVE-2026-88894 | < 8.7.2 | Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86774 | 8.6.3 – < 8.7.0 | Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86773 | 8.6.3 – < 8.7.0 | Snipe-IT 8.6.3 Broken Access Control via Kit Update Endpoints | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86772 | 8.6.3 – < 8.7.0 | Snipe-IT 8.6.3 Stored XSS via Department Names | MEDIUM 5.1 | 0.3 % | ||
| CVE-2026-86771 | 8.6.3 – < 8.7.0 | Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num | HIGH 8.3 | 0.3 % | ||
| CVE-2026-86770 | 8.6.3 – < 8.7.0 | Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation | HIGH 8.6 | 0.6 % | ||
| CVE-2026-86769 | 8.6.3 – < 8.7.0 | Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86768 | 8.6.3 – < 8.7.0 | Snipe-IT before 8.7.0 Improper Input Validation via API Checkout | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86767 | 8.6.3 – < 8.7.0 | Snipe-IT before 8.7.0 Cross-Company Read via requested-assets | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86766 | 8.6.3 – < 8.7.0 | Snipe-IT 8.6.3 Race Condition via Consumable Checkout | HIGH 7.1 | 0.3 % | ||
| CVE-2026-86765 | 8.6.3 – < 8.7.0 | Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint | HIGH 7.1 | 0.4 % | ||
| CVE-2026-86764 | 8.6.4 – < 8.7.0 | Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components | HIGH 7.1 | 0.4 % | ||
| CVE-2026-86763 | 7.0.12 – 8.7.2 | snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer | MEDIUM 5.1 | 0.3 % | ||
| CVE-2026-86762 | 8.6.3 – < 8.7.0 | Snipe-IT before 8.7.0 Authentication Bypass via API Middleware | HIGH 8.6 | 0.5 % | ||
| CVE-2026-86761 | 8.6.3 – < 8.7.0 | snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-86760 | 8.2.0 – < 8.7.0 | snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-86759 | < 8.7.0 | Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer | HIGH 7.1 | 0.4 % | ||
| CVE-2026-86758 | < 8.7.0 | Snipe-IT before 8.7.0 License Key Exposure via CSV Export | HIGH 7.1 | 0.4 % | ||
| CVE-2026-86757 | < 8.7.0 | Snipe-IT before 8.7.0 Information Disclosure via Custom Fields | HIGH 7.1 | 0.4 % | ||
| CVE-2026-86756 | 8.5.0 – 8.7.2 | Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86755 | 4.2.0 – 8.7.2 | Snipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuth | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86754 | < 8.7.0 | Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients | HIGH 8.5 | 0.3 % | ||
| CVE-2026-86753 | < 8.7.0 | snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86752 | < 8.7.0 | snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-86751 | < 8.7.0 | Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown | HIGH 8.4 | 0.4 % | ||
| CVE-2026-86750 | < 8.7.0 | snipe-it before 8.7.0 Authorization Bypass via API User Create/Update | HIGH 8.3 | 0.3 % | ||
| CVE-2026-86749 | < 8.7.0 | snipe-it before 8.7.0 Data Loss via Failed Image Write | HIGH 7.0 | 0.3 % | ||
| CVE-2026-86748 | < 8.7.0 | Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-86747 | < 8.7.0 | snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86746 | < 8.7.0 | Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay | HIGH 7.4 | 0.3 % | ||
| CVE-2026-86745 | < 8.7.0 | Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export | MEDIUM 5.1 | 0.4 % | ||
| CVE-2026-86744 | < 8.7.0 | snipe-it before 8.7.0 Race Condition in Asset Checkout | LOW 2.1 | 0.3 % | ||
| CVE-2026-86743 | < 8.7.0 | Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86742 | < 8.7.0 | Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report | MEDIUM 5.1 | 0.4 % | ||
| CVE-2026-86741 | < 8.7.0 | Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA | HIGH 8.4 | 0.4 % | ||
| CVE-2026-86740 | < 8.7.0 | Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains | MEDIUM 5.1 | 0.3 % | ||
| CVE-2026-86739 | < 8.7.0 | Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence | LOW 2.3 | 0.4 % | ||
| CVE-2026-86738 | < 8.7.0 | Snipe-IT before 8.7.0 CSS Injection via Custom CSS | CRITICAL 9.3 | 0.5 % | ||
| CVE-2026-86737 | < 8.7.0 | snipe-it before 8.7.0 Missing Authorization via barcode endpoint | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86736 | < 8.7.0 | snipe-it before 8.7.0 Checkout Request Counter Integrity Failure | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-86735 | < 8.7.0 | snipe-it before 8.7.0 SSRF via IPv6 transition address bypass | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-86734 | < 8.7.1 | Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field | HIGH 7.1 | 0.5 % | ||
| CVE-2026-86733 | < 8.7.0 | Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore | HIGH 8.6 | 0.6 % | ||
| CVE-2026-85617 | < 8.6.3 | snipe-it before 8.6.3 Authorization Bypass via Bulk Delete | HIGH 8.7 | 0.5 % | ||
| CVE-2026-85616 | 8.6.1 – < 8.6.2 | Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance | HIGH 8.4 | 0.4 % | ||
| CVE-2026-84206 | < 8.7.0 | Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-55694 | < 8.6.3 | Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover | HIGH 7.1 | 0.3 % | ||
| CVE-2026-55643 | < 8.6.3 | Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode | HIGH 7.6 | 0.3 % | ||
| CVE-2026-55703 | < 8.6.3 | Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-61807 | < 8.6.2 | Snipe-IT: Stored DOM XSS via table selected-count IDs | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-55519 | < 8.4.1 | Snipe-IT: Improper Authorization in File Deletion (IDOR) | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-55482 | < 8.4.1 | Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-55483 | < 8.6.0 | Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-50550 | < 8.5.0 | Snipe-IT: 2FA reset privilege bypass | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-49870 | < 8.6.1 | Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor` | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-49976 | < 8.6.1 | Snipe-IT: User Account Escalation via CSV Import | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-19579 | < 8.6.0 | Snipe-IT Checkout Request Cancellation IDOR | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-55481 | < 8.6.2 | Snipe-IT: CSS Injection via `header_color` Setting | MEDIUM 6.2 | 0.3 % | ||
| CVE-2026-55475 | < 8.6.1 | Snipe-IT: Import created_by can be overwritten | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-55469 | < 8.6.2 | Snipe-IT: Path traversal vulnerability via CSV import `image` field | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-55461 | < 8.6.2 | Snipe-IT: Open Redirect After User Edit | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-55479 | < 8.6.2 | Snipe-IT: Incorrect permission for legacy license checkin API | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-55452 | < 8.5.0 | Snipe-IT: CSV formula injection in Activity Report export | MEDIUM 4.8 | 0.4 % | ||
| CVE-2026-55466 | < 8.6.2 | Snipe-IT: Stored XSS via inline-served attachment | MEDIUM 6.2 | 0.4 % | ||
| CVE-2026-55515 | < 8.6.2 | Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint | MEDIUM 5.0 | 0.3 % | ||
| CVE-2026-55462 | < 8.6.2 | Snipe-IT: Authorization bypass on print inventory page | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-55464 | < 8.6.2 | Snipe-IT: Stored XSS via Markdown custom field | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-55460 | < 8.6.2 | Snipe-IT: Authorization bypass on bulk editing users | HIGH 7.1 | 0.4 % | ||
| CVE-2026-55472 | < 8.6.2 | Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-55476 | < 8.6.0 | Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-55478 | < 8.6.2 | Snipe-IT: Missing object-level authorization in Kits API | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-55843 | < 8.6.0 | Snipe-IT: Improper Privilege Management | HIGH 7.0 | 0.5 % | ||
| CVE-2026-55516 | < 8.6.2 | Snipe-IT: Cross-company asset maintenance re-parenting via API update | HIGH 7.7 | 0.4 % | ||
| CVE-2026-55474 | < 8.5.0 | Snipe-IT: Directory traversal in displaySig | HIGH 7.1 | 0.5 % | ||
| CVE-2026-54329 | < 8.6.2 | Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API | HIGH 8.5 | 0.4 % | ||
| CVE-2026-48492 | < 8.5.1 | Snipe-IT's selectlist visibility is too permissive | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-55542 | < 8.5.1 | Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL | LOW 1.3 | 0.3 % | ||
| CVE-2026-48493 | < 8.6.0 | Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment | MEDIUM 5.5 | 0.3 % | ||
| CVE-2026-48507 | < 8.6.0 | Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users | HIGH 7.1 | 0.2 % | ||
| CVE-2026-44833 | < 8.4.1 | Snipe-IT: Open redirect vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2026-44832 | < 8.4.1 | Snipe-IT: Privilege Escalation via API Permissions Assignment | HIGH 8.7 | 0.3 % | ||
| CVE-2026-44831 | < 8.4.1 | Snipe-IT: XSS vulnerability in component notes | MEDIUM 5.4 | 0.2 % |