Vulnerabilidades en Grokability

82 resultados
Análisis Vexday

Grokability apresenta footprint reduzido com apenas 1 vulnerabilidade registrada, ainda sem constatação de exploração ativa. A fraqueza identificada (CWE-639, relacionada a autorização/controle de acesso) foi recentemente publicada, demandando validação de sua relevância operacional e eventual remediação.

CVE-2026-86756MEDIUMSnipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayStateEPSS 0.2%CVE-2026-86753MEDIUMsnipe-it before 8.7.0 Business Logic Bypass via asset_model endpointEPSS 0.2%CVE-2026-55476MEDIUMSnipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin ParameterEPSS 0.2%CVE-2026-86755MEDIUMSnipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuthEPSS 0.2%CVE-2026-86771HIGHSnipe-IT before 8.7.0 Server-Side Request Forgery via employee_numEPSS 0.2%CVE-2026-86767MEDIUMSnipe-IT before 8.7.0 Cross-Company Read via requested-assetsEPSS 0.2%CVE-2026-86754HIGHSnipe-IT before 8.7.0 Authorization Bypass via OAuth ClientsEPSS 0.2%CVE-2026-55482MEDIUMSnipe-IT: Multi-Tenancy Bypass via Bulk Asset UpdateEPSS 0.2%CVE-2026-55479MEDIUMSnipe-IT: Incorrect permission for legacy license checkin APIEPSS 0.2%CVE-2026-86750HIGHsnipe-it before 8.7.0 Authorization Bypass via API User Create/UpdateEPSS 0.2%CVE-2026-86752MEDIUMsnipe-it before 8.7.0 Authorization Bypass via Asset Audit EndpointsEPSS 0.2%CVE-2026-86747MEDIUMsnipe-it before 8.7.0 Authorization Bypass via Pivot-Only UserEPSS 0.2%CVE-2026-50550MEDIUMSnipe-IT: 2FA reset privilege bypassEPSS 0.2%CVE-2026-86736MEDIUMsnipe-it before 8.7.0 Checkout Request Counter Integrity FailureEPSS 0.2%CVE-2026-55478MEDIUMSnipe-IT: Missing object-level authorization in Kits APIEPSS 0.2%CVE-2026-86773MEDIUMSnipe-IT 8.6.3 Broken Access Control via Kit Update EndpointsEPSS 0.2%CVE-2026-86737MEDIUMsnipe-it before 8.7.0 Missing Authorization via barcode endpointEPSS 0.2%CVE-2026-86774MEDIUMSnipe-IT before 8.7.0 Broken Access Control via AssetModelPolicyEPSS 0.2%CVE-2026-86769MEDIUMSnipe-IT before 8.7.0 Audit Log Misattribution via Consumables CheckoutEPSS 0.2%CVE-2026-44833MEDIUMSnipe-IT: Open redirect vulnerabilityEPSS 0.2%