Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how snipeitapp compares to other vendors in security performance

View Risk Score →

Snipe-IT Snipe-ITSnipe-IT: CSS Injection via `header_color` Setting

Risk 50
Severity
6.2
First published (updated )
CVE-2026-55481

Snipe-IT Snipe-ITSnipe-IT: Import created_by can be overwritten

Risk 33
Severity
5.7
First published (updated )
CVE-2026-55475

Snipe-IT Snipe-ITSnipe-IT: Path traversal vulnerability via CSV import `image` field

Risk 49
Severity
6.5
First published (updated )
CVE-2026-55469

Snipe-IT Snipe-ITSnipe-IT: Open Redirect After User Edit

Risk 38
Severity
6.1
First published (updated )
CVE-2026-55461

Snipe-IT Snipe-ITSnipe-IT: Incorrect permission for legacy license checkin API

Risk 26
Severity
5.3
First published (updated )
CVE-2026-55479
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Snipe-IT Snipe-ITSnipe-IT: CSV formula injection in Activity Report export

Risk 54
Severity
4.8
First published (updated )
CVE-2026-55452

Snipe-IT Snipe-ITSnipe-IT: Stored XSS via inline-served attachment

Risk 61
Severity
6.2
First published (updated )
CVE-2026-55466

Snipe-IT Snipe-ITSnipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint

Risk 26
Severity
5
First published (updated )
CVE-2026-55515

Snipe-IT Snipe-ITSnipe-IT: Authorization bypass on print inventory page

Risk 22
Severity
4.3
First published (updated )
CVE-2026-55462

Snipe-IT Snipe-ITSnipe-IT: Stored XSS via Markdown custom field

Risk 34
Severity
4.8
First published (updated )
CVE-2026-55464
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Snipe-IT Snipe-ITSnipe-IT: Authorization bypass on bulk editing users

Risk 48
Severity
7.1
First published (updated )
CVE-2026-55460

Snipe-IT Snipe-ITSnipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation

Risk 22
Severity
4.3
First published (updated )
CVE-2026-55472

Snipe-IT Snipe-ITSnipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter

Risk 26
Severity
5.3
First published (updated )
CVE-2026-55476

Snipe-IT Snipe-ITSnipe-IT: Missing object-level authorization in Kits API

Risk 34
Severity
5.3
First published (updated )
CVE-2026-55478

Snipe-IT Snipe-ITSnipe-IT: Improper Privilege Management

Risk 52
Severity
7
First published (updated )
CVE-2026-55843
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Snipe-IT Snipe-ITSnipe-IT: Cross-company asset maintenance re-parenting via API update

Risk 44
Severity
7.7
First published (updated )
CVE-2026-55516

Snipe-IT Snipe-ITSnipe-IT: Directory traversal in displaySig

Risk 40
Severity
7.1
First published (updated )
CVE-2026-55474

composer/snipe/snipe-itSnipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API

Risk 55
Severity
8.5
First published (updated )
CVE-2026-54329

composer/snipe/snipe-itSnipe-IT's S3 signature image retrieval lacks authorization before temporary URL

Risk 22
Severity
1.3
First published (updated )
CVE-2026-55542

composer/snipe/snipe-itSnipe-IT's selectlist visibility is too permissive

Risk 38
Severity
4.9
First published (updated )
CVE-2026-48492
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Snipe-IT Snipe-ITSnipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment

Risk 39
Severity
5.5
First published (updated )
CVE-2026-48493

Snipe-IT Snipe-ITSnipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users

Risk 48
Severity
7.1
First published (updated )
CVE-2026-48507

composer/snipe/snipe-itSnipe-IT: Open redirect vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2026-44833

composer/snipe/snipe-itSnipe-IT: Privilege Escalation via API Permissions Assignment

Risk 79
Severity
8.7
First published (updated )
CVE-2026-44832

composer/snipe/snipe-itSnipe-IT: XSS vulnerability in component notes

Risk 34
Severity
5.4
First published (updated )
CVE-2026-44831
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grokability Snipe-ITInsecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-0…

Risk 86
Severity
9.8
First published (updated )
CVE-2026-37709

Snipe-IT Snipe-ITAn improper authorization vulnerability in the /api/v1/users/{id} endpoint of Snipe-IT v8.4.0 allows…

Risk 38
Severity
6.5
First published (updated )
CVE-2026-38533

npm/snipe-itSnipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation

Risk 79
Severity
8.8
First published (updated )
CVE-2025-15602

Snipe-IT Snipe-ITXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2025-65621

Snipe-IT Snipe-ITXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2025-65622
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203