CVE-2026-114064: Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

Q: Who can exploit this issue?

Exploitation requires super-admin access to Snipe-IT. An unauthenticated or lower-privileged user is not described as being able to use the affected webhook testing capability.

Q: Which systems can be reached through the vulnerable feature?

A super-admin can direct webhook tests to internal network addresses, including loopback and RFC1918 ranges. Response differences between 4xx and 5xx errors can be used to identify active hosts and open ports.

Q: Are installations running version 8.7.0 affected?

The issue affects Snipe-IT versions before 8.7.0. Version 8.7.0 is not identified as affected in the provided information.

Published Oct 21, 2026

Updated

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx responses from Test Webhooks to map open ports and active hosts.

Affected Software

1 affected component

Snipe-IT Snipe-IT<8.7.0

Event History

Oct 21, 2026

CVE Published

via MITRE·12:36 AM

Data Sourced

via MITRE·12:36 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires super-admin access to Snipe-IT. An unauthenticated or lower-privileged user is not described as being able to use the affected webhook testing capability.

Which systems can be reached through the vulnerable feature?

A super-admin can direct webhook tests to internal network addresses, including loopback and RFC1918 ranges. Response differences between 4xx and 5xx errors can be used to identify active hosts and open ports.

Are installations running version 8.7.0 affected?

The issue affects Snipe-IT versions before 8.7.0. Version 8.7.0 is not identified as affected in the provided information.

CVE-2026-114064: Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which systems can be reached through the vulnerable feature?

Are installations running version 8.7.0 affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which systems can be reached through the vulnerable feature?

Are installations running version 8.7.0 affected?