Vulnerabilidades em Grokability

90 resultados
Análise Vexday

Grokability apresenta footprint reduzido com apenas 1 vulnerabilidade registrada, ainda sem constatação de exploração ativa. A fraqueza identificada (CWE-639, relacionada a autorização/controle de acesso) foi recentemente publicada, demandando validação de sua relevância operacional e eventual remediação.

CVE-2026-116201HIGHSnipe-IT before 8.5.0 SAML Assertion Replay via Race ConditionEPSS 0.3%CVE-2026-55643HIGHSnipe-IT: Tenant Isolation Bypass in FMCS Floater ModeEPSS 0.3%CVE-2026-86736MEDIUMsnipe-it before 8.7.0 Checkout Request Counter Integrity FailureEPSS 0.3%CVE-2026-55464MEDIUMSnipe-IT: Stored XSS via Markdown custom fieldEPSS 0.3%CVE-2026-55478MEDIUMSnipe-IT: Missing object-level authorization in Kits APIEPSS 0.3%CVE-2026-86743MEDIUMSnipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance ReportEPSS 0.3%CVE-2026-86740MEDIUMSnipe-IT before 8.7.0 Attachment Deletion Reports Success While File RemainsEPSS 0.3%CVE-2026-86746HIGHSnipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot ReplayEPSS 0.3%CVE-2026-55694HIGHSnipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File TakeoverEPSS 0.3%CVE-2026-86774MEDIUMSnipe-IT before 8.7.0 Broken Access Control via AssetModelPolicyEPSS 0.3%CVE-2026-86737MEDIUMsnipe-it before 8.7.0 Missing Authorization via barcode endpointEPSS 0.3%CVE-2026-55542LOWSnipe-IT's S3 signature image retrieval lacks authorization before temporary URLEPSS 0.3%CVE-2026-86753MEDIUMsnipe-it before 8.7.0 Business Logic Bypass via asset_model endpointEPSS 0.3%CVE-2026-86769MEDIUMSnipe-IT before 8.7.0 Audit Log Misattribution via Consumables CheckoutEPSS 0.3%CVE-2026-86755MEDIUMSnipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuthEPSS 0.3%CVE-2026-86763MEDIUMsnipe-it 7.0.12 through 8.6.3 Authorization Bypass via ImporterEPSS 0.3%CVE-2026-86744LOWsnipe-it before 8.7.0 Race Condition in Asset CheckoutEPSS 0.3%CVE-2026-50550MEDIUMSnipe-IT: 2FA reset privilege bypassEPSS 0.3%CVE-2026-88894MEDIUMSnipe-IT before 8.7.2 Authorization Bypass via Predefined Kit CheckoutEPSS 0.3%CVE-2026-86772MEDIUMSnipe-IT 8.6.3 Stored XSS via Department NamesEPSS 0.3%