Product by Grokability
Grokability Snipe-IT
90 known vulnerabilities in Grokability Snipe-IT (Grokability), 0 of them actively exploited (CISA KEV).
Key figures
90
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-86733 | Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore | 7.2 | |
| High | CVE-2026-86770 | Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation | 8.1 | |
| Critical | CVE-2026-86738 | Snipe-IT before 8.7.0 CSS Injection via Custom CSS | 8.7 | |
| High | CVE-2026-85617 | snipe-it before 8.6.3 Authorization Bypass via Bulk Delete | 8.8 | |
| High | CVE-2026-86762 | Snipe-IT before 8.7.0 Authentication Bypass via API Middleware | 8.1 | |
| Critical | CVE-2026-116199 | Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback | 8.1 | |
| High | CVE-2026-86734 | Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field | 6.5 | |
| High | CVE-2026-116201 | Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition | 8.8 | |
| High | CVE-2026-63493 | Snipe-IT: 2FA bypass via the API token flow | 8.1 | |
| Critical | CVE-2026-86751 | Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown | 8.5 | |
| High | CVE-2026-62368 | Snipe-IT: Stored XSS via Custom Field name in asset-list column headers | 8.1 | |
| High | CVE-2026-85616 | Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance | 8.5 | |
| High | CVE-2026-55466 | Snipe-IT: Stored XSS via inline-served attachment | 8.7 | |
| High | CVE-2026-86741 | Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA | 8.5 | |
| High | CVE-2026-86754 | Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients | 7.3 | |
| High | CVE-2026-63498 | Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API | 8.7 | |
| High | CVE-2026-55483 | Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation | 8.8 | |
| High | CVE-2026-86750 | snipe-it before 8.7.0 Authorization Bypass via API User Create/Update | 7.7 | |
| High | CVE-2026-86771 | Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num | 7.6 | |
| High | CVE-2026-55843 | Snipe-IT: Improper Privilege Management | 6.5 | |
| High | CVE-2026-55643 | Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode | 8.8 | |
| High | CVE-2026-86758 | Snipe-IT before 8.7.0 License Key Exposure via CSV Export | 6.5 | |
| Medium | CVE-2026-55469 | Snipe-IT: Path traversal vulnerability via CSV import `image` field | 6.5 | |
| High | CVE-2026-86765 | Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint | 6.5 | |
| High | CVE-2026-116200 | Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() | 5.9 |