CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,477 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,477
Show in the list
Critical, last 7 days
360
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product grokability:snipe_it. Show all products

61 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2025-15602High 8.8Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation
Assigned by VulnCheck
Mar 6, 2026
CVE-2026-19579Medium 5.4Snipe-IT Checkout Request Cancellation IDOR
Assigned by tenable
Aug 11, 2026
CVE-2026-49976Medium 6.5Snipe-IT: User Account Escalation via CSV Import
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-49870Medium 5.9Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-50550Medium 5.8Snipe-IT: 2FA reset privilege bypass
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55483Medium 4.9Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55482Medium 6.3Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55519Medium 5.4Snipe-IT: Improper Authorization in File Deletion (IDOR)
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-61807Medium 6.3Snipe-IT: Stored DOM XSS via table selected-count IDs
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55703Medium 4.3Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55643High 7.6Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-55694High 7.1Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
Assigned by GitHub_M
Aug 19, 2026
CVE-2026-84206Medium 4.3Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-85616High 8.5Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
Assigned by VulnCheck
Sep 4, 2026
CVE-2026-85617High 8.8snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
Assigned by VulnCheck
Sep 4, 2026
CVE-2026-86733High 7.2Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86734Medium 6.5Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86735Medium 5.0snipe-it before 8.7.0 SSRF via IPv6 transition address bypass
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86736Medium 4.3snipe-it before 8.7.0 Checkout Request Counter Integrity Failure
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86737Medium 4.3snipe-it before 8.7.0 Missing Authorization via barcode endpoint
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86738High 8.7Snipe-IT before 8.7.0 CSS Injection via Custom CSS
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86739Low 3.1Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86740Low 3.8Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86741High 8.5Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86742Medium 6.5Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86743Medium 5.0Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86744Low 2.2snipe-it before 8.7.0 Race Condition in Asset Checkout
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86745Medium 6.5Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86746Medium 6.4Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86747Medium 5.4snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86748Medium 6.1Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86749Medium 6.3snipe-it before 8.7.0 Data Loss via Failed Image Write
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86750High 7.7snipe-it before 8.7.0 Authorization Bypass via API User Create/Update
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86751High 8.5Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86752Medium 5.4snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86753Medium 4.3snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86754High 7.3Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86755Medium 5.4Snipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuth
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86756Medium 6.1Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86757Medium 6.5Snipe-IT before 8.7.0 Information Disclosure via Custom Fields
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86758Medium 6.5Snipe-IT before 8.7.0 License Key Exposure via CSV Export
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86759High 7.1Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86760Medium 5.4snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86761Medium 4.3snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86762High 8.1Snipe-IT before 8.7.0 Authentication Bypass via API Middleware
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86763Low 3.5snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86764Medium 6.5Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86765Medium 6.5Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86766Medium 6.5Snipe-IT 8.6.3 Race Condition via Consumable Checkout
Assigned by VulnCheck
Sep 9, 2026
CVE-2026-86767Medium 5.0Snipe-IT before 8.7.0 Cross-Company Read via requested-assets
Assigned by VulnCheck
Sep 9, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.