EUVD-2026-42998

Snipe-IT has incorrect permission for legacy license checkin API...

EUVD-2026-42986

Snipe-IT has missing object-level authorization in Kits API...

EUVD-2026-42989

Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancelbyadmin Parameter...

EUVD-2026-43001

Snipe-IT's import createdby can be overwritten...

EUVD-2026-42983

Snipe-IT vulnerable to directory traversal in displaySig...

EUVD-2026-42990

Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation...

EUVD-2026-43000

Snipe-IT has a path traversal vulnerability via CSV import image field...

EUVD-2026-42996

Snipe-IT vulnerable to stored XSS via inline-served attachment...

EUVD-2026-42992

Snipe-IT vulnerable to stored XSS via Markdown custom field...

EUVD-2026-42994

Snipe-IT has an authorization bypass on print inventory page...

EUVD-2026-42999

Snipe-IT has an Open Redirect After User Edit...

EUVD-2026-42991

Snipe-IT has an authorization bypass on bulk editing users...

EUVD-2026-42997

Snipe-IT has CSV formula injection in Activity Report export...

CVE-2026-55703

creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:05+00:00| published-proof-of-concept| https://github.com/grokability/snipe-it/security/advisories/GHSA-r9r3-g9fp-3q4q...

Snipe-IT: Stored DOM XSS via table selected-count IDs

Impact The table component derives data-selected-count-id from the component $name value. On manufacturer and supplier detail pages, stored manufacturer or supplier names are passed into affected table components as that name value. The client-side JavaScript later reads the browser-decoded...

GHSA-C8QC-WF67-342W Snipe-IT: Stored DOM XSS via table selected-count IDs

Impact The table component derives data-selected-count-id from the component $name value. On manufacturer and supplier detail pages, stored manufacturer or supplier names are passed into affected table components as that name value. The client-side JavaScript later reads the browser-decoded...

Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET

Impact Any activated account in a company can read every maintenance record for that company asset tag, supplier, purchase cost, free-text notes, dates without holding any asset or maintenance permission. Summary MaintenancesController::show renders a maintenance record without any authorization...

GHSA-R9R3-G9FP-3Q4Q Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET

Impact Any activated account in a company can read every maintenance record for that company asset tag, supplier, purchase cost, free-text notes, dates without holding any asset or maintenance permission. Summary MaintenancesController::show renders a maintenance record without any authorization...

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Impact An attacker can completely bypass file-name randomization security and without authorization download confidential, signed EULA files belonging to any other user across the application. Steps to Reproduce: 1. Log in as a restricted user. 2. Send a GET request to /api/v1/users/targetid/eula...

GHSA-3HGV-JR5J-CG9X Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Impact An attacker can completely bypass file-name randomization security and without authorization download confidential, signed EULA files belonging to any other user across the application. Steps to Reproduce: 1. Log in as a restricted user. 2. Send a GET request to /api/v1/users/targetid/eula...