GR
Vendor
grokability
90
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116201 New | SN snipe-it grokability | 8.8 | Oct 25 | Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition |
| CVE-2026-116200 New | SN snipe-it grokability | 5.9 | Oct 25 | Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() |
| CVE-2026-116199 New | SN snipe-it grokability | 8.1 | Oct 25 | Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback |
| CVE-2026-116198 New | SN snipe-it grokability | 4.3 | Oct 25 | Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store |
| CVE-2026-114064 | SN snipe-it grokability | 5.5 | Oct 21 | Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint |
| CVE-2026-62368 | SN snipe-it grokability | 8.4 | Sep 24 | Snipe-IT: Stored XSS via Custom Field name in asset-list column headers |
| CVE-2026-63493 | SN snipe-it grokability | 8.1 | Sep 24 | Snipe-IT: 2FA bypass via the API token flow |
| CVE-2026-63498 | SN snipe-it grokability | 5.4 | Sep 24 | Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API |
| CVE-2026-88894 | SN snipe-it grokability | 5.4 | Sep 10 | Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout |
| CVE-2026-86774 | SN snipe-it grokability | 6.3 | Sep 9 | Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy |
| CVE-2026-86773 | SN snipe-it grokability | 5.4 | Sep 9 | Snipe-IT 8.6.3 Broken Access Control via Kit Update Endpoints |
| CVE-2026-86772 | SN snipe-it grokability | 5.4 | Sep 9 | Snipe-IT 8.6.3 Stored XSS via Department Names |
| CVE-2026-86771 | SN snipe-it grokability | 7.6 | Sep 9 | Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num |
| CVE-2026-86770 | SN snipe-it grokability | 8.1 | Sep 9 | Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation |
| CVE-2026-86769 | SN snipe-it grokability | 4.3 | Sep 9 | Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout |
| CVE-2026-86768 | SN snipe-it grokability | 5.4 | Sep 9 | Snipe-IT before 8.7.0 Improper Input Validation via API Checkout |
| CVE-2026-86767 | SN snipe-it grokability | 5.0 | Sep 9 | Snipe-IT before 8.7.0 Cross-Company Read via requested-assets |
| CVE-2026-86766 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT 8.6.3 Race Condition via Consumable Checkout |
| CVE-2026-86765 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint |
| CVE-2026-86764 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components |
| CVE-2026-86763 | SN snipe-it grokability | 3.5 | Sep 9 | snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer |
| CVE-2026-86762 | SN snipe-it grokability | 8.1 | Sep 9 | Snipe-IT before 8.7.0 Authentication Bypass via API Middleware |
| CVE-2026-86761 | SN snipe-it grokability | 4.3 | Sep 9 | snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints |
| CVE-2026-86760 | SN snipe-it grokability | 5.4 | Sep 9 | snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag |
| CVE-2026-86759 | SN snipe-it grokability | 7.1 | Sep 9 | Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer |
| CVE-2026-86758 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT before 8.7.0 License Key Exposure via CSV Export |
| CVE-2026-86757 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT before 8.7.0 Information Disclosure via Custom Fields |
| CVE-2026-86756 | SN snipe-it grokability | 6.1 | Sep 9 | Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState |
| CVE-2026-86755 | SN snipe-it grokability | 5.4 | Sep 9 | Snipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuth |
| CVE-2026-86754 | SN snipe-it grokability | 7.3 | Sep 9 | Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients |
| CVE-2026-86753 | SN snipe-it grokability | 4.3 | Sep 9 | snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint |
| CVE-2026-86752 | SN snipe-it grokability | 5.4 | Sep 9 | snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints |
| CVE-2026-86751 | SN snipe-it grokability | 9.6 | Sep 9 | Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown |
| CVE-2026-86750 | SN snipe-it grokability | 7.7 | Sep 9 | snipe-it before 8.7.0 Authorization Bypass via API User Create/Update |
| CVE-2026-86749 | SN snipe-it grokability | 6.3 | Sep 9 | snipe-it before 8.7.0 Data Loss via Failed Image Write |
| CVE-2026-86748 | SN snipe-it grokability | 6.1 | Sep 9 | Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive |
| CVE-2026-86747 | SN snipe-it grokability | 5.4 | Sep 9 | snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User |
| CVE-2026-86746 | SN snipe-it grokability | 6.4 | Sep 9 | Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay |
| CVE-2026-86745 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export |
| CVE-2026-86744 | SN snipe-it grokability | 2.2 | Sep 9 | snipe-it before 8.7.0 Race Condition in Asset Checkout |
| CVE-2026-86743 | SN snipe-it grokability | 5.0 | Sep 9 | Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report |
| CVE-2026-86742 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report |
| CVE-2026-86741 | SN snipe-it grokability | 8.5 | Sep 9 | Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA |
| CVE-2026-86740 | SN snipe-it grokability | 3.8 | Sep 9 | Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains |
| CVE-2026-86739 | SN snipe-it grokability | 6.5 | Sep 9 | Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence |
| CVE-2026-86738 | SN snipe-it grokability | 8.7 | Sep 8 | Snipe-IT before 8.7.0 CSS Injection via Custom CSS |
| CVE-2026-86737 | SN snipe-it grokability | 4.3 | Sep 8 | snipe-it before 8.7.0 Missing Authorization via barcode endpoint |
| CVE-2026-86736 | SN snipe-it grokability | 4.3 | Sep 8 | snipe-it before 8.7.0 Checkout Request Counter Integrity Failure |
| CVE-2026-86735 | SN snipe-it grokability | 5.0 | Sep 8 | snipe-it before 8.7.0 SSRF via IPv6 transition address bypass |
| CVE-2026-86734 | SN snipe-it grokability | 6.5 | Sep 8 | Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field |
| CVE-2026-86733 | SN snipe-it grokability | 7.2 | Sep 8 | Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore |
| CVE-2026-85617 | SN snipe-it grokability | 8.8 | Sep 4 | snipe-it before 8.6.3 Authorization Bypass via Bulk Delete |
| CVE-2026-85616 | SN snipe-it grokability | 8.5 | Sep 4 | Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance |
| CVE-2026-84206 | SN snipe-it grokability | 4.3 | Sep 1 | Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore |
| CVE-2026-55694 | SN snipe-it grokability | 6.5 | Aug 19 | Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover |
| CVE-2026-55643 | SN snipe-it grokability | 8.8 | Aug 19 | Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode |
| CVE-2026-55703 | SN snipe-it grokability | 4.3 | Aug 19 | Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET |
| CVE-2026-61807 | SN snipe-it grokability | 6.1 | Aug 19 | Snipe-IT: Stored DOM XSS via table selected-count IDs |
| CVE-2026-55519 | SN snipe-it grokability | 5.4 | Aug 19 | Snipe-IT: Improper Authorization in File Deletion (IDOR) |
| CVE-2026-55482 | SN snipe-it grokability | 6.3 | Aug 19 | Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update |