VendorsSnipeitappsnipe-itall versions
Vulnerabilities

Snipeitapp Snipe-IT

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

135CVEs
CVE-2026-116198
Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store
Published 2026-10-25 · Analyzed
5.3EPSS 0.001
CVE-2026-86740
Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains
Published 2026-09-09 · Analyzed
5.1EPSS 0.003
CVE-2026-86763
snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer
Published 2026-09-09 · Analyzed
5.1EPSS 0.003
CVE-2025-47226
Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.
Published 2025-05-02 · Analyzed
5.01 PoCEPSS 0.013
CVE-2026-55515
Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint
Published 2026-07-10 · Analyzed
5.0EPSS 0.003
CVE-2022-32060
An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
Published 2022-07-07 · Modified
4.8EPSS 0.012
CVE-2022-32061
An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
Published 2022-07-07 · Modified
4.8EPSS 0.007
CVE-2022-3173
Improper Authentication in snipe/snipe-it
Published 2022-09-17 · Modified
4.3EPSS 0.009
CVE-2021-4089
Improper Access Control in snipe/snipe-it
Published 2021-12-10 · Modified
4.3EPSS 0.007
CVE-2021-3931
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Published 2021-11-13 · Modified
4.3EPSS 0.004
CVE-2026-55462
Snipe-IT: Authorization bypass on print inventory page
Published 2026-07-10 · Analyzed
4.3EPSS 0.003
CVE-2026-55703
Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
Published 2026-08-19 · Analyzed
4.3EPSS 0.003
CVE-2026-55472
Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation
Published 2026-07-10 · Analyzed
4.3EPSS 0.003
CVE-2026-55542
Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL
Published 2026-07-08 · Analyzed
4.3EPSS 0.003
CVE-2026-86744
snipe-it before 8.7.0 Race Condition in Asset Checkout
Published 2026-09-09 · Analyzed
2.2EPSS 0.003
← Prev4 / 4