Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55481 |
|
Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55481)
cross-site scripting in snipe/snipe-it (CVE-2026-55481). Risk of unauthorized operations or information disclosure. Exploitable via ``default.blade.php``. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55466 |
|
Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55466)
cross-site scripting in snipe/snipe-it (CVE-2026-55466). Confidential information can be exposed externally. Exploitable via ``mimes``. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-55464 |
|
Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-55464)
cross-site scripting in snipe/snipe-it (CVE-2026-55464). Risk of unauthorized operations or information disclosure. Exploitable via ``assets.edit``. Mitigation: upgrade to `8.6.2` or later.
|
| CVE-2026-37709 |
|
Vulnerability in snipe/snipe-it (CVE-2026-37709)
vulnerability in snipe/snipe-it (CVE-2026-37709). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.4.1` or later.
|
| CVE-2025-65622 |
|
Cross-Site Scripting (XSS) in snipeitapp (CVE-2025-65622)
cross-site scripting in snipeitapp (CVE-2025-65622). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-65621 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2025-65621)
cross-site scripting in privilege-escalation (CVE-2025-65621). Risk of unauthorized operations or information disclosure.
|