DeutschShown in its original language — a full translation is planned for a future version.
Snipe-IT: Mehrere Schwachstellen
view advisory published 2026-08-11
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder möglicherweise einen Denial-of-Service-Zustand auszulösen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-55703US | —OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, any activated account can request /maintenances/{id} and read maintenance records for assets in the same company… | ||||
| CVE-2026-55694US | medium6.5 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/{target_id}/eulas to obtain another user's randomized EULA filename a… | ||||
| CVE-2026-55643US | high8.8OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a company-scoped user in FMCS floater mode can access users whose company_id is null because broad API queries an… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-3hgv-jr5j-cg9x vom 2026-08-11external
- GitHub Security Advisory GHSA-c6w2-j4wq-mvwg vom 2026-08-11external
- GitHub Security Advisory GHSA-mx3g-8v84-j6gg vom 2026-08-11external
- GitHub Security Advisory GHSA-r9r3-g9fp-3q4q vom 2026-08-11external
- WID-SEC-W-2026-2792 - CSAF Versionself
- WID-SEC-2026-2792 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan