Vulnerabilities in Grokability
90 resultsCVE-2026-55462MEDIUMSnipe-IT: Authorization bypass on print inventory pageEPSS 0.3%CVE-2026-86754HIGHSnipe-IT before 8.7.0 Authorization Bypass via OAuth ClientsEPSS 0.3%CVE-2026-19579MEDIUMSnipe-IT Checkout Request Cancellation IDOREPSS 0.3%CVE-2026-86749HIGHsnipe-it before 8.7.0 Data Loss via Failed Image WriteEPSS 0.3%CVE-2026-55476MEDIUMSnipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin ParameterEPSS 0.3%CVE-2026-55515MEDIUMSnipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpointEPSS 0.3%CVE-2026-55482MEDIUMSnipe-IT: Multi-Tenancy Bypass via Bulk Asset UpdateEPSS 0.3%CVE-2026-86756MEDIUMSnipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayStateEPSS 0.3%CVE-2026-55472MEDIUMSnipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary ValidationEPSS 0.3%CVE-2026-86767MEDIUMSnipe-IT before 8.7.0 Cross-Company Read via requested-assetsEPSS 0.3%CVE-2026-55479MEDIUMSnipe-IT: Incorrect permission for legacy license checkin APIEPSS 0.3%CVE-2026-86750HIGHsnipe-it before 8.7.0 Authorization Bypass via API User Create/UpdateEPSS 0.3%CVE-2026-63493HIGHSnipe-IT: 2FA bypass via the API token flowEPSS 0.3%CVE-2026-86771HIGHSnipe-IT before 8.7.0 Server-Side Request Forgery via employee_numEPSS 0.3%CVE-2026-44832HIGHSnipe-IT: Privilege Escalation via API Permissions AssignmentEPSS 0.3%CVE-2026-55481MEDIUMSnipe-IT: CSS Injection via `header_color` SettingEPSS 0.3%CVE-2026-116199CRITICALSnipe-IT before 8.6.3 Authentication Bypass via Google SSO CallbackEPSS 0.3%CVE-2026-86735MEDIUMsnipe-it before 8.7.0 SSRF via IPv6 transition address bypassEPSS 0.3%CVE-2026-55461MEDIUMSnipe-IT: Open Redirect After User EditEPSS 0.3%CVE-2026-48493MEDIUMSnipe-IT Vulnerable to Privilege Escalation for self via API Permissions AssignmentEPSS 0.3%