grokability snipe-it vulnerabilities
90 published CVEs name grokability snipe-it among the affected products.
- 90Published CVEs90 of them scored
- 90Last 12 monthspublished in the last year
- 2Critical33 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116201
Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
grokability · snipe-it
High8.7 - CVE-2026-116200
Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()
grokability · snipe-it
High8.2 - CVE-2026-116199
Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback
grokability · snipe-it
Critical9.2 - CVE-2026-116198
Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store
grokability · snipe-it
Medium5.3 - CVE-2026-114064
Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint
grokability · snipe-it
Medium5.1 - CVE-2026-62368
Snipe-IT: Stored XSS via Custom Field name in asset-list column headers
grokability · snipe-it
High8.1 - CVE-2026-63493
Snipe-IT: 2FA bypass via the API token flow
grokability · snipe-it
High8.6 - CVE-2026-63498
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
grokability · snipe-it
High8.7 - CVE-2026-88894
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout
grokability · snipe-it
Medium5.3 - CVE-2026-86774
Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy
grokability · snipe-it
Medium5.3