Vulnerabilidades en grokability

85 resultados
Análisis Vexday

A Grokability apresenta 25 vulnerabilidades registradas, todas publicadas nos últimos 90 dias, indicando exposição recente e concentrada. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e nenhuma é classificada como crítica, reduzindo a urgência imediata. A fraqueza dominante é CWE-863 (falha de autorização), sugerindo problemas estruturais no controle de acesso que requerem revisão arquitetural.

CVE-2026-48493MEDIUMSnipe-IT Vulnerable to Privilege Escalation for self via API Permissions AssignmentEPSS 0.3%CVE-2026-86736MEDIUMsnipe-it before 8.7.0 Checkout Request Counter Integrity FailureEPSS 0.3%CVE-2026-55464MEDIUMSnipe-IT: Stored XSS via Markdown custom fieldEPSS 0.3%CVE-2026-55478MEDIUMSnipe-IT: Missing object-level authorization in Kits APIEPSS 0.3%CVE-2026-86743MEDIUMSnipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance ReportEPSS 0.3%CVE-2026-86746HIGHSnipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot ReplayEPSS 0.3%CVE-2026-86740MEDIUMSnipe-IT before 8.7.0 Attachment Deletion Reports Success While File RemainsEPSS 0.3%CVE-2026-86774MEDIUMSnipe-IT before 8.7.0 Broken Access Control via AssetModelPolicyEPSS 0.3%CVE-2026-86737MEDIUMsnipe-it before 8.7.0 Missing Authorization via barcode endpointEPSS 0.3%CVE-2026-55542LOWSnipe-IT's S3 signature image retrieval lacks authorization before temporary URLEPSS 0.3%CVE-2026-86753MEDIUMsnipe-it before 8.7.0 Business Logic Bypass via asset_model endpointEPSS 0.3%CVE-2026-86769MEDIUMSnipe-IT before 8.7.0 Audit Log Misattribution via Consumables CheckoutEPSS 0.3%CVE-2026-86755MEDIUMSnipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuthEPSS 0.3%CVE-2026-86763MEDIUMsnipe-it 7.0.12 through 8.6.3 Authorization Bypass via ImporterEPSS 0.3%CVE-2026-86744LOWsnipe-it before 8.7.0 Race Condition in Asset CheckoutEPSS 0.3%CVE-2026-50550MEDIUMSnipe-IT: 2FA reset privilege bypassEPSS 0.3%CVE-2026-88894MEDIUMSnipe-IT before 8.7.2 Authorization Bypass via Predefined Kit CheckoutEPSS 0.3%CVE-2026-86772MEDIUMSnipe-IT 8.6.3 Stored XSS via Department NamesEPSS 0.3%CVE-2026-86747MEDIUMsnipe-it before 8.7.0 Authorization Bypass via Pivot-Only UserEPSS 0.3%CVE-2026-86773MEDIUMSnipe-IT 8.6.3 Broken Access Control via Kit Update EndpointsEPSS 0.3%