christopherfi-dev

9 credited records · 9 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2026-86750No exploit	snipe-it before 8.7.0 Authorization Bypass via API User Create/Updatesnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	High8.3	—	0.3%	Sep 9, 2026
28Monitor	CVE-2026-86749No exploit	snipe-it before 8.7.0 Data Loss via Failed Image Writesnipeitapp · snipe-it · CWE-252	High7.0	—	0.3%	Sep 9, 2026
27Monitor	CVE-2026-86748No exploit	Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archivesnipeitapp · snipe-it · CWE-460	Medium6.9	—	0.4%	Sep 9, 2026
21Monitor	CVE-2026-86747No exploit	snipe-it before 8.7.0 Authorization Bypass via Pivot-Only Usersnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.3%	Sep 9, 2026
8Monitor	CVE-2026-86744No exploit	snipe-it before 8.7.0 Race Condition in Asset Checkoutsnipeitapp · snipe-it · CWE-362 Race condition	Low2.1	—	0.3%	Sep 9, 2026
33Monitor	CVE-2026-86741No exploit	Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULAsnipeitapp · snipe-it · CWE-73 SSRF Path traversal	High8.4	—	0.4%	Sep 9, 2026
20Monitor	CVE-2026-86740No exploit	Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remainssnipeitapp · snipe-it · CWE-212	Medium5.1	—	0.3%	Sep 9, 2026
9Monitor	CVE-2026-86739No exploit	Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidencesnipeitapp · snipe-it · CWE-252	Low2.3	—	0.4%	Sep 9, 2026
37Monitor	CVE-2026-86738No exploit	Snipe-IT before 8.7.0 CSS Injection via Custom CSSsnipeitapp · snipe-it · CWE-79 XSS CSRF	Critical9.3	—	0.5%	Sep 8, 2026

CVE-2026-86750
33Monitor
snipe-it before 8.7.0 Authorization Bypass via API User Create/Update
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86749
28Monitor
snipe-it before 8.7.0 Data Loss via Failed Image Write
HighCVSS 7.0No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86748
27Monitor
Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive
MediumCVSS 6.9No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86747
21Monitor
snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86744
8Monitor
snipe-it before 8.7.0 Race Condition in Asset Checkout
LowCVSS 2.1No exploitEPSS 0%
- Race condition
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86741
33Monitor
Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
HighCVSS 8.4No exploitEPSS 0%
- SSRF
- Path traversal
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86740
20Monitor
Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains
MediumCVSS 5.1No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86739
9Monitor
Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence
LowCVSS 2.3No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86738
37Monitor
Snipe-IT before 8.7.0 CSS Injection via Custom CSS
CriticalCVSS 9.3No exploitEPSS 0%
- XSS
- CSRF
snipeitapp · snipe-itSep 8, 2026