Vulnerabilidades em grokability
25 resultadosAnálise Vexday
A Grokability apresenta 25 vulnerabilidades registradas, todas publicadas nos últimos 90 dias, indicando exposição recente e concentrada. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e nenhuma é classificada como crítica, reduzindo a urgência imediata. A fraqueza dominante é CWE-863 (falha de autorização), sugerindo problemas estruturais no controle de acesso que requerem revisão arquitetural.
CVE-2026-55469MEDIUMSnipe-IT: Path traversal vulnerability via CSV import `image` fieldEPSS 0.4%CVE-2026-55466MEDIUMSnipe-IT: Stored XSS via inline-served attachmentEPSS 0.3%CVE-2026-55474HIGHSnipe-IT: Directory traversal in displaySigEPSS 0.3%CVE-2026-44832HIGHSnipe-IT: Privilege Escalation via API Permissions AssignmentEPSS 0.3%CVE-2026-55843HIGHSnipe-IT: Improper Privilege ManagementEPSS 0.3%CVE-2026-55460HIGHSnipe-IT: Authorization bypass on bulk editing usersEPSS 0.3%CVE-2026-55462MEDIUMSnipe-IT: Authorization bypass on print inventory pageEPSS 0.3%CVE-2026-55515MEDIUMSnipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpointEPSS 0.3%CVE-2026-55481MEDIUMSnipe-IT: CSS Injection via `header_color` SettingEPSS 0.2%CVE-2026-55452MEDIUMSnipe-IT: CSV formula injection in Activity Report exportEPSS 0.2%CVE-2026-55461MEDIUMSnipe-IT: Open Redirect After User EditEPSS 0.2%CVE-2026-48492MEDIUMSnipe-IT's selectlist visibility is too permissiveEPSS 0.2%CVE-2026-54329HIGHSnipe-IT: Cross-Tenant Accessory Injection in Snipe-IT APIEPSS 0.2%CVE-2026-55516HIGHSnipe-IT: Cross-company asset maintenance re-parenting via API updateEPSS 0.2%CVE-2026-44831MEDIUMSnipe-IT: XSS vulnerability in component notesEPSS 0.2%CVE-2026-55476MEDIUMSnipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin ParameterEPSS 0.2%CVE-2026-55472MEDIUMSnipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary ValidationEPSS 0.2%CVE-2026-48507HIGHSnipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing usersEPSS 0.2%CVE-2026-55475MEDIUMSnipe-IT: Import created_by can be overwrittenEPSS 0.2%CVE-2026-55479MEDIUMSnipe-IT: Incorrect permission for legacy license checkin APIEPSS 0.2%