CVE-2026-55542

creationtimestamp| type| source ---|---|--- 2026-07-08 23:04:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6a62hksq2l...

CVE-2026-55542 Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL

Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, Snipe-IT S3 signature image retrieval lacks authorization before temporary URL. On S3-backed deployments, authenticated users who know a signature filename can obtain a 5-minute signed S3 URL because the S3 branch returns...