Vulnerabilidades en Grokability
90 resultadosCVE-2026-55469MEDIUMSnipe-IT: Path traversal vulnerability via CSV import `image` fieldEPSS 0.6%CVE-2026-86733HIGHSnipe-IT before 8.7.0 Remote Code Execution via Backup RestoreEPSS 0.6%CVE-2026-86770HIGHSnipe-IT before 8.7.0 Authentication Bypass via SAML Username CollationEPSS 0.6%CVE-2026-86734HIGHSnipe-IT before 8.7.1 Denial of Service via Unbounded Note FieldEPSS 0.5%CVE-2026-55843HIGHSnipe-IT: Improper Privilege ManagementEPSS 0.5%CVE-2026-86738CRITICALSnipe-IT before 8.7.0 CSS Injection via Custom CSSEPSS 0.5%CVE-2026-49976MEDIUMSnipe-IT: User Account Escalation via CSV ImportEPSS 0.5%CVE-2026-55474HIGHSnipe-IT: Directory traversal in displaySigEPSS 0.5%CVE-2026-85617HIGHsnipe-it before 8.6.3 Authorization Bypass via Bulk DeleteEPSS 0.5%CVE-2026-86762HIGHSnipe-IT before 8.7.0 Authentication Bypass via API MiddlewareEPSS 0.5%CVE-2026-55460HIGHSnipe-IT: Authorization bypass on bulk editing usersEPSS 0.4%CVE-2026-55466MEDIUMSnipe-IT: Stored XSS via inline-served attachmentEPSS 0.4%CVE-2026-55452MEDIUMSnipe-IT: CSV formula injection in Activity Report exportEPSS 0.4%CVE-2026-86758HIGHSnipe-IT before 8.7.0 License Key Exposure via CSV ExportEPSS 0.4%CVE-2026-86742MEDIUMSnipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance ReportEPSS 0.4%CVE-2026-86765HIGHSnipe-IT 8.6.3 Authorization Bypass via Asset Update EndpointEPSS 0.4%CVE-2026-49870MEDIUMSnipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`EPSS 0.4%CVE-2026-86748MEDIUMSnipe-IT before 8.7.0 Database Wipe via Invalid Backup ArchiveEPSS 0.4%CVE-2026-54329HIGHSnipe-IT: Cross-Tenant Accessory Injection in Snipe-IT APIEPSS 0.4%CVE-2026-114064MEDIUMSnipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing EndpointEPSS 0.4%