CVE-2026-55466

creationtimestamp| type| source ---|---|--- 2026-07-11 02:02:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdkzzz4is2e 2026-07-14 04:18:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqle26th6727 2026-07-16 08:22:36+00:00| seen|...

CVE-2026-55466

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, UploadFileRequest sanitizes SVG content only when PHP finfo reports image/svg+xml and UploadedFilesController serves attachments inline without using StorageHelper::allowSafeInline, allowing a low-privilege user to upload active...