{"schema_version":1,"title":"Grokability vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 48 vulnerabilities in Grokability: 0 in the last 7 days and 27 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-116200, was published on 25 October 2026. 4 vulnerabilities in the last four weeks, up 300% on the four before (1). 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/grokability","json_url":"https://junglewise.ai/threats/vendors/grokability.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/grokability","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":14,"all_time":48,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":4,"last_90_days":27,"last_365_days":48},"latest":[{"cve":"CVE-2026-116200","cvss":5.9,"slug":"cve-2026-116200-snipe-it-before-8-6-3-ignores-the-ldap-start-tls-return-value-in","title":"Snipe-IT LDAP StartTLS downgrade to cleartext","severity":"medium","exploited":false,"published_at":"2026-10-25T14:17:00.74+00:00","url":"https://junglewise.ai/threats/cve-2026-116200-snipe-it-before-8-6-3-ignores-the-ldap-start-tls-return-value-in"},{"cve":"CVE-2026-116199","cvss":8.1,"slug":"cve-2026-116199-snipe-it-before-8-6-3-contains-an-authentication-bypass-in","title":"Snipe-IT authentication bypass in Google SSO callback","severity":"high","exploited":false,"published_at":"2026-10-25T14:17:00.593+00:00","url":"https://junglewise.ai/threats/cve-2026-116199-snipe-it-before-8-6-3-contains-an-authentication-bypass-in"},{"cve":"CVE-2026-116198","cvss":4.3,"slug":"cve-2026-116198-snipe-it-before-8-7-0-contains-a-missing-encryption","title":"Snipe-IT missing encryption in API assets endpoint","severity":"medium","exploited":false,"published_at":"2026-10-25T14:17:00.453+00:00","url":"https://junglewise.ai/threats/cve-2026-116198-snipe-it-before-8-7-0-contains-a-missing-encryption"},{"cve":"CVE-2026-114064","cvss":5.5,"slug":"cve-2026-114064-snipe-it-before-8-7-0-contains-a-server-side-request-forgery","title":"Snipe-IT server-side request forgery in webhook testing","severity":"medium","exploited":false,"published_at":"2026-10-21T01:17:29.733+00:00","url":"https://junglewise.ai/threats/cve-2026-114064-snipe-it-before-8-7-0-contains-a-server-side-request-forgery"},{"cve":"CVE-2026-62368","cvss":8.1,"epss":0.003,"slug":"cve-2026-62368-snipe-it-stored-xss-in-custom-field-names","title":"Snipe-IT stored XSS in custom field names","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:05.207+00:00","url":"https://junglewise.ai/threats/cve-2026-62368-snipe-it-stored-xss-in-custom-field-names"},{"cve":"CVE-2026-86769","cvss":4.3,"epss":0.0028,"slug":"cve-2026-86769-snipe-it-improper-ownership-management-in-consumables-checkout","title":"Snipe-IT improper ownership management in consumables checkout API","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:27.447+00:00","url":"https://junglewise.ai/threats/cve-2026-86769-snipe-it-improper-ownership-management-in-consumables-checkout"},{"cve":"CVE-2026-86764","cvss":6.5,"epss":0.0037,"slug":"cve-2026-86764-snipe-it-permission-bypass-in-assigned-components-endpoint","title":"Snipe-IT permission bypass in assigned components endpoint","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:26.597+00:00","url":"https://junglewise.ai/threats/cve-2026-86764-snipe-it-permission-bypass-in-assigned-components-endpoint"},{"cve":"CVE-2026-86762","cvss":8.1,"epss":0.0047,"slug":"cve-2026-86762-snipe-it-authentication-bypass-via-deactivated-user-api-tokens","title":"Snipe-IT authentication bypass via deactivated user API tokens","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:26.22+00:00","url":"https://junglewise.ai/threats/cve-2026-86762-snipe-it-authentication-bypass-via-deactivated-user-api-tokens"},{"cve":"CVE-2026-86753","cvss":4.3,"epss":0.0028,"slug":"cve-2026-86753-snipe-it-business-logic-bypass-in-asset-model-request-endpoint","title":"snipe-it business logic bypass in asset model request endpoint","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:24.447+00:00","url":"https://junglewise.ai/threats/cve-2026-86753-snipe-it-business-logic-bypass-in-asset-model-request-endpoint"},{"cve":"CVE-2026-86752","cvss":5.4,"epss":0.0025,"slug":"cve-2026-86752-snipe-it-asset-audit-endpoints-authorization-bypass","title":"snipe-it asset audit endpoints authorization bypass","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:24.307+00:00","url":"https://junglewise.ai/threats/cve-2026-86752-snipe-it-asset-audit-endpoints-authorization-bypass"},{"cve":"CVE-2026-86743","cvss":5,"epss":0.0029,"slug":"cve-2026-86743-snipe-it-asset-acceptance-report-authorization-bypass","title":"Snipe-IT asset acceptance report authorization bypass","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:22.987+00:00","url":"https://junglewise.ai/threats/cve-2026-86743-snipe-it-asset-acceptance-report-authorization-bypass"},{"cve":"CVE-2026-86742","cvss":6.5,"epss":0.0041,"slug":"cve-2026-86742-snipe-it-formula-injection-in-asset-acceptance-report-csv-export","title":"Snipe-IT formula injection in asset acceptance report CSV export","severity":"medium","exploited":false,"published_at":"2026-09-09T14:17:22.82+00:00","url":"https://junglewise.ai/threats/cve-2026-86742-snipe-it-formula-injection-in-asset-acceptance-report-csv-export"},{"cve":"CVE-2026-86741","cvss":8.5,"epss":0.0035,"slug":"cve-2026-86741-snipe-it-arbitrary-file-read-and-ssrf-via-category-eula","title":"Snipe-IT arbitrary file read and SSRF via category EULA","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:22.68+00:00","url":"https://junglewise.ai/threats/cve-2026-86741-snipe-it-arbitrary-file-read-and-ssrf-via-category-eula"},{"cve":"CVE-2026-86739","cvss":3.1,"epss":0.0036,"slug":"cve-2026-86739-snipe-it-acceptance-finalization-without-stored-evidence","title":"Snipe-IT acceptance finalization without stored evidence verification","severity":"low","exploited":false,"published_at":"2026-09-09T14:17:22.387+00:00","url":"https://junglewise.ai/threats/cve-2026-86739-snipe-it-acceptance-finalization-without-stored-evidence"},{"cve":"CVE-2026-86736","cvss":4.3,"epss":0.003,"slug":"cve-2026-86736-snipe-it-checkout-request-counter-integrity-failure","title":"snipe-it checkout request counter integrity failure","severity":"medium","exploited":false,"published_at":"2026-09-08T16:18:36.643+00:00","url":"https://junglewise.ai/threats/cve-2026-86736-snipe-it-checkout-request-counter-integrity-failure"},{"cve":"CVE-2026-86735","cvss":5,"epss":0.0031,"slug":"cve-2026-86735-snipe-it-externalurl-ssrf-via-ipv6-transition-address-bypass","title":"snipe-it ExternalUrl SSRF via IPv6 transition address bypass","severity":"medium","exploited":false,"published_at":"2026-09-08T16:18:36.107+00:00","url":"https://junglewise.ai/threats/cve-2026-86735-snipe-it-externalurl-ssrf-via-ipv6-transition-address-bypass"},{"cve":"CVE-2026-85617","cvss":8.8,"epss":0.0048,"slug":"cve-2026-85617-snipe-it-authorization-bypass-in-bulk-delete","title":"snipe-it authorization bypass in bulk delete","severity":"high","exploited":false,"published_at":"2026-09-04T12:17:25.41+00:00","url":"https://junglewise.ai/threats/cve-2026-85617-snipe-it-authorization-bypass-in-bulk-delete"},{"cve":"CVE-2026-61807","cvss":6.1,"epss":0.0047,"slug":"cve-2026-61807-snipe-it-stored-dom-xss-via-table-selected-count-ids","title":"Snipe-IT stored DOM XSS via table selected-count IDs","severity":"medium","exploited":false,"published_at":"2026-08-19T19:17:21.433+00:00","url":"https://junglewise.ai/threats/cve-2026-61807-snipe-it-stored-dom-xss-via-table-selected-count-ids"},{"cve":"CVE-2026-55703","cvss":4.3,"epss":0.0033,"slug":"cve-2026-55703-snipe-it-maintenance-record-disclosure-via-missing-authorization","title":"Snipe-IT maintenance record disclosure via missing authorization","severity":"medium","exploited":false,"published_at":"2026-08-19T19:17:20.813+00:00","url":"https://junglewise.ai/threats/cve-2026-55703-snipe-it-maintenance-record-disclosure-via-missing-authorization"},{"cve":"CVE-2026-55694","cvss":6.5,"epss":0.0041,"slug":"cve-2026-55694-snipe-it-authorization-bypass-in-eula-file-access","title":"Snipe-IT authorization bypass in EULA file access","severity":"high","exploited":false,"published_at":"2026-08-19T19:17:20.68+00:00","url":"https://junglewise.ai/threats/cve-2026-55694-snipe-it-authorization-bypass-in-eula-file-access"},{"cve":"CVE-2026-55643","cvss":8.8,"epss":0.0045,"slug":"cve-2026-55643-snipe-it-tenant-isolation-bypass-in-authorization-checks","title":"Snipe-IT tenant isolation bypass in authorization checks","severity":"high","exploited":false,"published_at":"2026-08-19T19:17:20.533+00:00","url":"https://junglewise.ai/threats/cve-2026-55643-snipe-it-tenant-isolation-bypass-in-authorization-checks"},{"cve":"CVE-2026-55519","cvss":5.4,"epss":0.0037,"slug":"cve-2026-55519-grokability-snipe-it-idor-in-file-deletion-endpoint","title":"Grokability Snipe-IT IDOR in file deletion endpoint","severity":"medium","exploited":false,"published_at":"2026-08-19T19:17:20.263+00:00","url":"https://junglewise.ai/threats/cve-2026-55519-grokability-snipe-it-idor-in-file-deletion-endpoint"},{"cve":"CVE-2026-55483","cvss":8.8,"epss":0.0041,"slug":"cve-2026-55483-snipe-it-privilege-escalation-in-userscontroller-user-creation","title":"Snipe-IT privilege escalation in UsersController user creation","severity":"high","exploited":false,"published_at":"2026-08-19T19:17:20.123+00:00","url":"https://junglewise.ai/threats/cve-2026-55483-snipe-it-privilege-escalation-in-userscontroller-user-creation"},{"cve":"CVE-2026-55482","cvss":6.3,"epss":0.0033,"slug":"cve-2026-55482-grokability-snipe-it-multi-tenancy-bypass-in-bulk-asset-update","title":"Grokability Snipe-IT multi-tenancy bypass in Bulk Asset Update","severity":"medium","exploited":false,"published_at":"2026-08-19T19:17:19.967+00:00","url":"https://junglewise.ai/threats/cve-2026-55482-grokability-snipe-it-multi-tenancy-bypass-in-bulk-asset-update"},{"cve":"CVE-2026-50550","cvss":5.8,"epss":0.0027,"slug":"cve-2026-50550-snipe-it-2fa-reset-privilege-bypass-in-user-management","title":"Snipe-IT 2FA reset privilege bypass in user management","severity":"medium","exploited":false,"published_at":"2026-08-19T19:17:18.38+00:00","url":"https://junglewise.ai/threats/cve-2026-50550-snipe-it-2fa-reset-privilege-bypass-in-user-management"}],"vendor":{"hub":true,"name":"Grokability","slug":"grokability","description":"Software company known for IT asset management and inventory tracking solutions.","url":"https://junglewise.ai/threats/vendors/grokability"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":10},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-37709","cvss":9.8,"epss":0.0079,"slug":"cve-2026-37709-grokability-snipe-it-insecure-permissions-in","title":"Grokability Snipe-IT insecure permissions in UploadedFilesController","severity":"critical","exploited":false,"published_at":"2026-05-07T18:16:19.013+00:00","url":"https://junglewise.ai/threats/cve-2026-37709-grokability-snipe-it-insecure-permissions-in"},{"cve":"CVE-2026-85617","cvss":8.8,"epss":0.0048,"slug":"cve-2026-85617-snipe-it-authorization-bypass-in-bulk-delete","title":"snipe-it authorization bypass in bulk delete","severity":"high","exploited":false,"published_at":"2026-09-04T12:17:25.41+00:00","url":"https://junglewise.ai/threats/cve-2026-85617-snipe-it-authorization-bypass-in-bulk-delete"},{"cve":"CVE-2026-55643","cvss":8.8,"epss":0.0045,"slug":"cve-2026-55643-snipe-it-tenant-isolation-bypass-in-authorization-checks","title":"Snipe-IT tenant isolation bypass in authorization checks","severity":"high","exploited":false,"published_at":"2026-08-19T19:17:20.533+00:00","url":"https://junglewise.ai/threats/cve-2026-55643-snipe-it-tenant-isolation-bypass-in-authorization-checks"},{"cve":"CVE-2026-44832","cvss":8.8,"epss":0.0044,"slug":"cve-2026-44832-grokability-snipe-it-privilege-escalation-in-users-api","title":"Grokability Snipe-IT privilege escalation in Users API","severity":"high","exploited":false,"published_at":"2026-05-26T20:16:20.183+00:00","url":"https://junglewise.ai/threats/cve-2026-44832-grokability-snipe-it-privilege-escalation-in-users-api"},{"cve":"CVE-2026-55483","cvss":8.8,"epss":0.0041,"slug":"cve-2026-55483-snipe-it-privilege-escalation-in-userscontroller-user-creation","title":"Snipe-IT privilege escalation in UsersController user creation","severity":"high","exploited":false,"published_at":"2026-08-19T19:17:20.123+00:00","url":"https://junglewise.ai/threats/cve-2026-55483-snipe-it-privilege-escalation-in-userscontroller-user-creation"},{"cve":"CVE-2026-55466","cvss":8.7,"epss":0.0044,"slug":"cve-2026-55466-grokability-snipe-it-stored-xss-in-asset-attachments","title":"Grokability Snipe-IT stored XSS in asset attachments","severity":"high","exploited":false,"published_at":"2026-07-10T20:16:46.97+00:00","url":"https://junglewise.ai/threats/cve-2026-55466-grokability-snipe-it-stored-xss-in-asset-attachments"},{"cve":"CVE-2026-54329","cvss":8.5,"epss":0.0039,"slug":"cve-2026-54329-grokability-snipe-it-mass-assignment-in-accessories-api","title":"Grokability Snipe-IT mass assignment in Accessories API","severity":"high","exploited":false,"published_at":"2026-07-10T19:17:24.44+00:00","url":"https://junglewise.ai/threats/cve-2026-54329-grokability-snipe-it-mass-assignment-in-accessories-api"},{"cve":"CVE-2026-86741","cvss":8.5,"epss":0.0035,"slug":"cve-2026-86741-snipe-it-arbitrary-file-read-and-ssrf-via-category-eula","title":"Snipe-IT arbitrary file read and SSRF via category EULA","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:22.68+00:00","url":"https://junglewise.ai/threats/cve-2026-86741-snipe-it-arbitrary-file-read-and-ssrf-via-category-eula"},{"cve":"CVE-2026-86762","cvss":8.1,"epss":0.0047,"slug":"cve-2026-86762-snipe-it-authentication-bypass-via-deactivated-user-api-tokens","title":"Snipe-IT authentication bypass via deactivated user API tokens","severity":"high","exploited":false,"published_at":"2026-09-09T14:17:26.22+00:00","url":"https://junglewise.ai/threats/cve-2026-86762-snipe-it-authentication-bypass-via-deactivated-user-api-tokens"},{"cve":"CVE-2026-62368","cvss":8.1,"epss":0.003,"slug":"cve-2026-62368-snipe-it-stored-xss-in-custom-field-names","title":"Snipe-IT stored XSS in custom field names","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:05.207+00:00","url":"https://junglewise.ai/threats/cve-2026-62368-snipe-it-stored-xss-in-custom-field-names"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Grokability Snipe-IT","slug":"grokability-snipe-it","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/grokability-snipe-it"}]}