snipe

21 credited records · 21 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2026-88894No exploit	Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkoutsnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.3%	Sep 10, 2026
21Monitor	CVE-2026-86756No exploit	Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayStatesnipeitapp · snipe-it · CWE-601 Pre-auth Open redirect	Medium5.3	—	0.3%	Sep 9, 2026
21Monitor	CVE-2026-86752No exploit	snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpointssnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.2%	Sep 9, 2026
33Monitor	CVE-2026-86750No exploit	snipe-it before 8.7.0 Authorization Bypass via API User Create/Updatesnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	High8.3	—	0.3%	Sep 9, 2026
28Monitor	CVE-2026-86749No exploit	snipe-it before 8.7.0 Data Loss via Failed Image Writesnipeitapp · snipe-it · CWE-252	High7.0	—	0.3%	Sep 9, 2026
27Monitor	CVE-2026-86748No exploit	Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archivesnipeitapp · snipe-it · CWE-460	Medium6.9	—	0.4%	Sep 9, 2026
21Monitor	CVE-2026-86747No exploit	snipe-it before 8.7.0 Authorization Bypass via Pivot-Only Usersnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.3%	Sep 9, 2026
29Monitor	CVE-2026-86746No exploit	Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replaysnipeitapp · snipe-it · CWE-269	High7.4	—	0.3%	Sep 9, 2026
20Monitor	CVE-2026-86745No exploit	Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Exportsnipeitapp · snipe-it · CWE-1236	Medium5.1	—	0.4%	Sep 9, 2026
8Monitor	CVE-2026-86744No exploit	snipe-it before 8.7.0 Race Condition in Asset Checkoutsnipeitapp · snipe-it · CWE-362 Race condition	Low2.1	—	0.3%	Sep 9, 2026
21Monitor	CVE-2026-86743No exploit	Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Reportsnipeitapp · snipe-it · CWE-639 Broken access control (IDOR)	Medium5.3	—	0.3%	Sep 9, 2026
20Monitor	CVE-2026-86742No exploit	Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Reportsnipeitapp · snipe-it · CWE-1236	Medium5.1	—	0.4%	Sep 9, 2026
33Monitor	CVE-2026-86741No exploit	Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULAsnipeitapp · snipe-it · CWE-73 SSRF Path traversal	High8.4	—	0.4%	Sep 9, 2026
20Monitor	CVE-2026-86740No exploit	Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remainssnipeitapp · snipe-it · CWE-212	Medium5.1	—	0.3%	Sep 9, 2026
9Monitor	CVE-2026-86739No exploit	Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidencesnipeitapp · snipe-it · CWE-252	Low2.3	—	0.4%	Sep 9, 2026
37Monitor	CVE-2026-86738No exploit	Snipe-IT before 8.7.0 CSS Injection via Custom CSSsnipeitapp · snipe-it · CWE-79 XSS CSRF	Critical9.3	—	0.5%	Sep 8, 2026
21Monitor	CVE-2026-86737No exploit	snipe-it before 8.7.0 Missing Authorization via barcode endpointsnipeitapp · snipe-it · CWE-862 Broken access control (IDOR)	Medium5.3	—	0.3%	Sep 8, 2026
21Monitor	CVE-2026-86736No exploit	snipe-it before 8.7.0 Checkout Request Counter Integrity Failuresnipeitapp · snipe-it · CWE-682	Medium5.3	—	0.3%	Sep 8, 2026
23Monitor	CVE-2026-86735No exploit	snipe-it before 8.7.0 SSRF via IPv6 transition address bypasssnipeitapp · snipe-it · CWE-918 SSRF	Medium5.9	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-86734No exploit	Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Fieldsnipeitapp · snipe-it · CWE-400 Denial of service	High7.1	—	0.5%	Sep 8, 2026
34Monitor	CVE-2026-85617No exploit	snipe-it before 8.6.3 Authorization Bypass via Bulk Deletesnipeitapp · snipe-it · CWE-639 Broken access control (IDOR)	High8.7	—	0.5%	Sep 4, 2026

CVE-2026-88894
21Monitor
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 10, 2026
CVE-2026-86756
21Monitor
Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Open redirect
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86752
21Monitor
snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86750
33Monitor
snipe-it before 8.7.0 Authorization Bypass via API User Create/Update
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86749
28Monitor
snipe-it before 8.7.0 Data Loss via Failed Image Write
HighCVSS 7.0No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86748
27Monitor
Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive
MediumCVSS 6.9No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86747
21Monitor
snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86746
29Monitor
Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay
HighCVSS 7.4No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86745
20Monitor
Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export
MediumCVSS 5.1No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86744
8Monitor
snipe-it before 8.7.0 Race Condition in Asset Checkout
LowCVSS 2.1No exploitEPSS 0%
- Race condition
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86743
21Monitor
Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86742
20Monitor
Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report
MediumCVSS 5.1No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86741
33Monitor
Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
HighCVSS 8.4No exploitEPSS 0%
- SSRF
- Path traversal
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86740
20Monitor
Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains
MediumCVSS 5.1No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86739
9Monitor
Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence
LowCVSS 2.3No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86738
37Monitor
Snipe-IT before 8.7.0 CSS Injection via Custom CSS
CriticalCVSS 9.3No exploitEPSS 0%
- XSS
- CSRF
snipeitapp · snipe-itSep 8, 2026
CVE-2026-86737
21Monitor
snipe-it before 8.7.0 Missing Authorization via barcode endpoint
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 8, 2026
CVE-2026-86736
21Monitor
snipe-it before 8.7.0 Checkout Request Counter Integrity Failure
MediumCVSS 5.3No exploitEPSS 0%
snipeitapp · snipe-itSep 8, 2026
CVE-2026-86735
23Monitor
snipe-it before 8.7.0 SSRF via IPv6 transition address bypass
MediumCVSS 5.9No exploitEPSS 0%
- SSRF
snipeitapp · snipe-itSep 8, 2026
CVE-2026-86734
28Monitor
Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field
HighCVSS 7.1No exploitEPSS 1%
- Denial of service
snipeitapp · snipe-itSep 8, 2026
CVE-2026-85617
34Monitor
snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 4, 2026