SN
Product
snipe-it
90
CVEs
0
On KEV
9.6
Max CVSS
5
New 30D
Severity mix
Critical 1High 25Medium 61Low 3
Watch
Add snipe-it to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86761 | 4.3 | Sep 9 | snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints Affected: 8.6.3 before 8.7.0 |
| CVE-2026-86753 | 4.3 | Sep 9 | snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint Affected: before 8.7.0 |
| CVE-2026-86737 | 4.3 | Sep 8 | snipe-it before 8.7.0 Missing Authorization via barcode endpoint Affected: before 8.7.0 |
| CVE-2026-86736 | 4.3 | Sep 8 | snipe-it before 8.7.0 Checkout Request Counter Integrity Failure Affected: before 8.7.0 |
| CVE-2026-84206 | 4.3 | Sep 1 | Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore Affected: before 8.7.0 |
| CVE-2026-55703 | 4.3 | Aug 19 | Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET Affected: < 8.6.3 |
| CVE-2026-55479 | 4.3 | Jul 10 | Snipe-IT: Incorrect permission for legacy license checkin API Affected: < 8.6.2 |
| CVE-2026-55462 | 4.3 | Jul 10 | Snipe-IT: Authorization bypass on print inventory page Affected: < 8.6.2 |
| CVE-2026-55472 | 4.3 | Jul 10 | Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation Affected: < 8.6.2 |
| CVE-2026-55476 | 4.3 | Jul 10 | Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter Affected: < 8.6.0 |
| CVE-2026-55542 | 4.3 | Jul 8 | Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL Affected: < 8.5.1 |