{"schema_version":1,"title":"Snipeitapp Snipe-It vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 89 vulnerabilities in Snipeitapp Snipe-It: 3 in the last 7 days and 73 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-63498, was published on 24 September 2026.","url":"https://junglewise.ai/threats/technologies/snipe-it","json_url":"https://junglewise.ai/threats/technologies/snipe-it.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/snipe-it","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":25,"all_time":89,"critical":1,"exploited":0,"last_7_days":3,"last_30_days":49,"last_90_days":73,"last_365_days":88},"latest":[{"cve":"CVE-2026-63498","cvss":8.7,"epss":0.0024,"slug":"cve-2026-63498-snipe-it-stored-xss-via-inline-xml-rendering-in-uploaded-files","title":"Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/{object_type}/{id}/files/{fil","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:05.513+00:00","url":"https://junglewise.ai/threats/cve-2026-63498-snipe-it-stored-xss-via-inline-xml-rendering-in-uploaded-files"},{"cve":"CVE-2026-63493","cvss":7.5,"epss":0.0027,"slug":"cve-2026-63493-snipe-it-2fa-bypass-via-api-token-flow","title":"Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:05.367+00:00","url":"https://junglewise.ai/threats/cve-2026-63493-snipe-it-2fa-bypass-via-api-token-flow"},{"cve":"CVE-2026-62368","cvss":8.1,"epss":0.003,"slug":"cve-2026-62368-snipe-it-stored-xss-in-custom-field-names","title":"Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a user with the customfields.create permission can store markup in Custom","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:05.207+00:00","url":"https://junglewise.ai/threats/cve-2026-62368-snipe-it-stored-xss-in-custom-field-names"},{"cve":"CVE-2026-88894","cvss":5.4,"epss":0.0026,"slug":"cve-2026-88894-snipe-it-predefined-kit-checkout-fmcs-tenant-isolation-bypass","title":"Snipe-IT predefined kit checkout FMCS tenant isolation bypass","severity":"medium","exploited":false,"published_at":"2026-09-10T14:17:18.76+00:00","url":"https://junglewise.ai/threats/cve-2026-88894-snipe-it-predefined-kit-checkout-fmcs-tenant-isolation-bypass"},{"cve":"CVE-2026-86774","cvss":6.3,"epss":0.0029,"slug":"cve-2026-86774-snipe-it-broken-access-control-in-asset-model-file-attachments","title":"Snipe-IT broken access control in Asset Model file attachments","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:28.363+00:00","url":"https://junglewise.ai/threats/cve-2026-86774-snipe-it-broken-access-control-in-asset-model-file-attachments"},{"cve":"CVE-2026-86773","cvss":5.4,"epss":0.0025,"slug":"cve-2026-86773-snipe-it-broken-access-control-in-predefined-kit-endpoints","title":"Snipe-IT broken access control in Predefined Kit endpoints","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:28.04+00:00","url":"https://junglewise.ai/threats/cve-2026-86773-snipe-it-broken-access-control-in-predefined-kit-endpoints"},{"cve":"CVE-2026-86772","cvss":5.4,"epss":0.0025,"slug":"cve-2026-86772-snipe-it-stored-cross-site-scripting-in-department-names","title":"Snipe-IT stored cross-site scripting in department names","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:27.89+00:00","url":"https://junglewise.ai/threats/cve-2026-86772-snipe-it-stored-cross-site-scripting-in-department-names"},{"cve":"CVE-2026-86771","cvss":7.6,"epss":0.0032,"slug":"cve-2026-86771-snipe-it-acceptance-pdf-server-side-request-forgery-via-unescaped","title":"Snipe-IT acceptance PDF server-side request forgery via unescaped employee_num","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:27.74+00:00","url":"https://junglewise.ai/threats/cve-2026-86771-snipe-it-acceptance-pdf-server-side-request-forgery-via-unescaped"},{"cve":"CVE-2026-86770","cvss":8.1,"epss":0.0057,"slug":"cve-2026-86770-snipe-it-authentication-bypass-in-saml-username-collation","title":"Snipe-IT authentication bypass in SAML username collation","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:27.593+00:00","url":"https://junglewise.ai/threats/cve-2026-86770-snipe-it-authentication-bypass-in-saml-username-collation"},{"cve":"CVE-2026-86769","cvss":4.3,"epss":0.0028,"slug":"cve-2026-86769-snipe-it-improper-ownership-management-in-consumables-checkout","title":"Snipe-IT improper ownership management in consumables checkout API","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:27.447+00:00","url":"https://junglewise.ai/threats/cve-2026-86769-snipe-it-improper-ownership-management-in-consumables-checkout"},{"cve":"CVE-2026-86768","cvss":5.4,"epss":0.0035,"slug":"cve-2026-86768-snipe-it-api-checkout-endpoints-improper-input-validation","title":"Snipe-IT API checkout endpoints improper input validation","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:27.307+00:00","url":"https://junglewise.ai/threats/cve-2026-86768-snipe-it-api-checkout-endpoints-improper-input-validation"},{"cve":"CVE-2026-86767","cvss":5,"epss":0.0033,"slug":"cve-2026-86767-snipe-it-unauthorized-cross-company-read-in-requested-assets","title":"Snipe-IT unauthorized cross-company read in requested assets","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:27.133+00:00","url":"https://junglewise.ai/threats/cve-2026-86767-snipe-it-unauthorized-cross-company-read-in-requested-assets"},{"cve":"CVE-2026-86766","cvss":6.5,"epss":0.0035,"slug":"cve-2026-86766-snipe-it-consumable-checkout-race-condition","title":"Snipe-IT consumable checkout race condition","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:26.963+00:00","url":"https://junglewise.ai/threats/cve-2026-86766-snipe-it-consumable-checkout-race-condition"},{"cve":"CVE-2026-86765","cvss":6.5,"epss":0.0041,"slug":"cve-2026-86765-snipe-it-authorization-bypass-in-asset-update-endpoint","title":"Snipe-IT authorization bypass in asset update endpoint","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:26.78+00:00","url":"https://junglewise.ai/threats/cve-2026-86765-snipe-it-authorization-bypass-in-asset-update-endpoint"},{"cve":"CVE-2026-86764","cvss":6.5,"epss":0.0037,"slug":"cve-2026-86764-snipe-it-permission-bypass-in-assigned-components-endpoint","title":"Snipe-IT permission bypass in assigned components endpoint","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:26.597+00:00","url":"https://junglewise.ai/threats/cve-2026-86764-snipe-it-permission-bypass-in-assigned-components-endpoint"},{"cve":"CVE-2026-86763","cvss":3.5,"epss":0.0027,"slug":"cve-2026-86763-snipe-it-livewire-importer-authorization-bypass","title":"Snipe-IT Livewire importer authorization bypass","severity":"low","exploited":false,"published_at":"2026-09-09T14:17:26.407+00:00","url":"https://junglewise.ai/threats/cve-2026-86763-snipe-it-livewire-importer-authorization-bypass"},{"cve":"CVE-2026-86762","cvss":8.1,"epss":0.0047,"slug":"cve-2026-86762-snipe-it-authentication-bypass-via-deactivated-user-api-tokens","title":"Snipe-IT authentication bypass via deactivated user API tokens","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:26.22+00:00","url":"https://junglewise.ai/threats/cve-2026-86762-snipe-it-authentication-bypass-via-deactivated-user-api-tokens"},{"cve":"CVE-2026-86761","cvss":4.3,"epss":0.0036,"slug":"cve-2026-86761-snipe-it-authorization-bypass-in-location-print-endpoints","title":"Snipe-IT authorization bypass in location print endpoints","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:25.99+00:00","url":"https://junglewise.ai/threats/cve-2026-86761-snipe-it-authorization-bypass-in-location-print-endpoints"},{"cve":"CVE-2026-86760","cvss":5.4,"epss":0.0038,"slug":"cve-2026-86760-snipe-it-authorization-bypass-in-user-account-activation-toggle","title":"Snipe-IT authorization bypass in user account activation toggle","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:25.8+00:00","url":"https://junglewise.ai/threats/cve-2026-86760-snipe-it-authorization-bypass-in-user-account-activation-toggle"},{"cve":"CVE-2026-86759","cvss":7.1,"epss":0.0037,"slug":"cve-2026-86759-snipe-it-missing-authorization-in-asset-history-csv-importer","title":"Snipe-IT missing authorization in asset-history CSV importer","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:25.593+00:00","url":"https://junglewise.ai/threats/cve-2026-86759-snipe-it-missing-authorization-in-asset-history-csv-importer"},{"cve":"CVE-2026-86758","cvss":6.5,"epss":0.0041,"slug":"cve-2026-86758-snipe-it-authorization-bypass-in-license-key-export","title":"Snipe-IT authorization bypass in license key export","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:25.43+00:00","url":"https://junglewise.ai/threats/cve-2026-86758-snipe-it-authorization-bypass-in-license-key-export"},{"cve":"CVE-2026-86757","cvss":6.5,"epss":0.0037,"slug":"cve-2026-86757-snipe-it-authorization-bypass-in-encrypted-custom-field-form","title":"Snipe-IT authorization bypass in encrypted custom field form rendering","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:25.17+00:00","url":"https://junglewise.ai/threats/cve-2026-86757-snipe-it-authorization-bypass-in-encrypted-custom-field-form"},{"cve":"CVE-2026-86756","cvss":6.1,"epss":0.0033,"slug":"cve-2026-86756-snipe-it-open-redirect-in-saml-relaystate-parameter","title":"Snipe-IT open redirect in SAML RelayState parameter","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:24.883+00:00","url":"https://junglewise.ai/threats/cve-2026-86756-snipe-it-open-redirect-in-saml-relaystate-parameter"},{"cve":"CVE-2026-86755","cvss":5.4,"epss":0.0027,"slug":"cve-2026-86755-snipe-it-permission-bypass-in-passport-personal-access-token","title":"Snipe-IT permission bypass in Passport personal-access-token routes","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:24.737+00:00","url":"https://junglewise.ai/threats/cve-2026-86755-snipe-it-permission-bypass-in-passport-personal-access-token"},{"cve":"CVE-2026-86754","cvss":7.3,"epss":0.0034,"slug":"cve-2026-86754-snipe-it-authorization-bypass-in-oauth-client-management","title":"Snipe-IT authorization bypass in OAuth client management","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:24.59+00:00","url":"https://junglewise.ai/threats/cve-2026-86754-snipe-it-authorization-bypass-in-oauth-client-management"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":20},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":43},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":3}],"related":[],"technology":{"hub":true,"name":"Snipeitapp Snipe-It","slug":"snipe-it","vendor":{"name":"Snipeitapp","slug":"snipeitapp","url":"https://junglewise.ai/threats/vendors/snipeitapp"},"aliases":[],"homepage":"https://snipeitapp.com/","repo_url":"https://github.com/snipe/snipe-it","description":"An open-source IT asset management system built on the Laravel framework.","url":"https://junglewise.ai/threats/technologies/snipe-it"},"most_severe":[{"cve":"CVE-2026-37709","cvss":9.8,"slug":"cve-2026-37709-grokability-snipe-it-insecure-permissions-in","title":"Grokability Snipe-IT insecure permissions in UploadedFilesController","severity":"critical","exploited":false,"published_at":"2026-05-07T18:16:19.013+00:00","url":"https://junglewise.ai/threats/cve-2026-37709-grokability-snipe-it-insecure-permissions-in"},{"cve":"CVE-2022-23064","cvss":8.8,"epss":0.0132,"slug":"cve-2022-23064-snipe-it-host-header-injection-in-password-reset","title":"Snipe-IT host header injection in password reset","severity":"high","exploited":false,"published_at":"2022-05-03T00:00:43+00:00","url":"https://junglewise.ai/threats/cve-2022-23064-snipe-it-host-header-injection-in-password-reset"},{"cve":"CVE-2026-85617","cvss":8.8,"epss":0.0048,"slug":"cve-2026-85617-snipe-it-authorization-bypass-in-bulk-delete","title":"snipe-it authorization bypass in bulk delete","severity":"high","exploited":false,"published_at":"2026-09-04T12:17:25.41+00:00","url":"https://junglewise.ai/threats/cve-2026-85617-snipe-it-authorization-bypass-in-bulk-delete"},{"cve":"CVE-2026-44832","cvss":8.8,"epss":0.0001,"slug":"cve-2026-44832-grokability-snipe-it-privilege-escalation-in-users-api","title":"Grokability Snipe-IT privilege escalation in Users API","severity":"high","exploited":false,"published_at":"2026-05-26T20:16:20.183+00:00","url":"https://junglewise.ai/threats/cve-2026-44832-grokability-snipe-it-privilege-escalation-in-users-api"},{"cve":"CVE-2026-86738","cvss":8.7,"epss":0.0049,"slug":"cve-2026-86738-snipe-it-css-injection-in-custom-css-field","title":"Snipe-IT CSS injection in custom CSS field","severity":"high","exploited":false,"published_at":"2026-09-08T16:18:36.98+00:00","url":"https://junglewise.ai/threats/cve-2026-86738-snipe-it-css-injection-in-custom-css-field"},{"cve":"CVE-2026-55466","cvss":8.7,"epss":0.0044,"slug":"cve-2026-55466-grokability-snipe-it-stored-xss-in-asset-attachments","title":"Grokability Snipe-IT stored XSS in asset attachments","severity":"high","exploited":false,"published_at":"2026-07-10T20:16:46.97+00:00","url":"https://junglewise.ai/threats/cve-2026-55466-grokability-snipe-it-stored-xss-in-asset-attachments"},{"cve":"CVE-2026-63498","cvss":8.7,"epss":0.0024,"slug":"cve-2026-63498-snipe-it-stored-xss-via-inline-xml-rendering-in-uploaded-files","title":"Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/{object_type}/{id}/files/{fil","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:05.513+00:00","url":"https://junglewise.ai/threats/cve-2026-63498-snipe-it-stored-xss-via-inline-xml-rendering-in-uploaded-files"},{"cve":"CVE-2026-85616","cvss":8.5,"epss":0.0038,"slug":"cve-2026-85616-snipe-it-authorization-bypass-in-checkout-acceptance-report","title":"Snipe-IT authorization bypass in checkout-acceptance report","severity":"high","exploited":false,"published_at":"2026-09-04T12:17:25.27+00:00","url":"https://junglewise.ai/threats/cve-2026-85616-snipe-it-authorization-bypass-in-checkout-acceptance-report"},{"cve":"CVE-2026-86751","cvss":8.5,"epss":0.0037,"slug":"cve-2026-86751-snipe-it-markdown-image-injection-in-mail-notifications","title":"Snipe-IT markdown image injection in mail notifications","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:24.17+00:00","url":"https://junglewise.ai/threats/cve-2026-86751-snipe-it-markdown-image-injection-in-mail-notifications"},{"cve":"CVE-2026-86741","cvss":8.5,"epss":0.0035,"slug":"cve-2026-86741-snipe-it-arbitrary-file-read-and-ssrf-via-category-eula","title":"Snipe-IT arbitrary file read and SSRF via category EULA","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:22.68+00:00","url":"https://junglewise.ai/threats/cve-2026-86741-snipe-it-arbitrary-file-read-and-ssrf-via-category-eula"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}