Vulnerabilities in grokability
90 resultsCVE-2026-86747MEDIUMsnipe-it before 8.7.0 Authorization Bypass via Pivot-Only UserEPSS 0.3%CVE-2026-86773MEDIUMSnipe-IT 8.6.3 Broken Access Control via Kit Update EndpointsEPSS 0.3%CVE-2026-86752MEDIUMsnipe-it before 8.7.0 Authorization Bypass via Asset Audit EndpointsEPSS 0.2%CVE-2026-63498HIGHSnipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files APIEPSS 0.2%CVE-2026-48507HIGHSnipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing usersEPSS 0.2%CVE-2026-44831MEDIUMSnipe-IT: XSS vulnerability in component notesEPSS 0.2%CVE-2026-61807MEDIUMSnipe-IT: Stored DOM XSS via table selected-count IDsEPSS 0.2%CVE-2026-44833MEDIUMSnipe-IT: Open redirect vulnerabilityEPSS 0.2%CVE-2026-116200HIGHSnipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()EPSS 0.2%CVE-2026-116198MEDIUMSnipe-IT before 8.7.0 Missing Encryption via Api AssetsController storeEPSS 0.1%