CVE-2026-55694 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/targetid/eulas to obtain another user's randomized EULA filename and then download the signed file through /account/stored-eula-file/filename. The primary /stored-eula-file/filename rout...

CVE-2026-55694

Snipe-IT (IT asset/license management system) prior to 8.6.3 is vulnerable to a chained information disclosure and IDOR that allows a restricted user to download another user's signed EULA file. The attack works in two steps: first, a request to /api/v1/users/{target_id}/eulas leaks the randomize...

CVE-2026-55694 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/targetid/eulas to obtain another user's randomized EULA filename and then download the signed file through /account/stored-eula-file/filename. The primary /stored-eula-file/filename rout...

EUVD-2026-62627

Snipe-IT is an IT asset/license management system. Prior to 8.6.3, any activated account can request /maintenances/id and read maintenance records for assets in the same company without asset or maintenance permission. app/Http/Controllers/MaintenancesController.php show renders the record withou...

CVE-2026-55703

Snipe-IT (IT asset/license management system) prior to 8.6.3 contains an authorization bypass in MaintenancesController::show(). The method renders a maintenance record without calling authorize(), unlike all sibling actions (index, edit, update, destroy) which properly gate on the asset. Any act...

EUVD-2026-62682

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...

CVE-2026-72479

A flaw was found in the Linux kernel's iio: accel: mma8452 module. When an I2C read operation fails, the mma8452read function incorrectly returns a success status. This can lead to the mma8452readraw function using uninitialized stack memory, potentially resulting in information disclosure...

CVE-2026-75589

A flaw was found in Net::OAuth. This vulnerability arises from a non-constant-time comparison used when verifying HMAC-SHA1, HMAC-SHA256, and PLAINTEXT signatures. A remote attacker could exploit this by timing the responses to submitted messages, allowing them to recover valid signatures or, in...

CVE-2026-71106

creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62552

creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70743

creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71056

creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70752

creationtimestamp| type| source ---|---|--- 2026-08-19 17:46:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-72447

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostic SCTPDIAG endpoint dumping mechanism. A race condition occurs when address lists are traversed without holding the necessary socket lock, allowing concurrent modifications. A local attacker could exploit th...

CVE-2026-62581

creationtimestamp| type| source ---|---|--- 2026-08-19 17:45:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

[SECURITY] [DSA 6451-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6451-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 19, 2026 https://www.debian.org/security/faq -...

CVE-2026-74532

A flaw was found in the Bluetooth btintel driver of the Linux kernel. The btinteldiagnostics function fails to validate the length of a diagnostics Vendor Specific Event VSE before accessing its data. This oversight allows an attacker to potentially read data beyond the intended memory boundary,...

CVE-2026-72444

A flaw was found in the Linux kernel's flowdissector component. When processing network packets on non-Ethernet devices, such as a TUN device in L3 mode, with specific traffic control filters, the flowdissector can attempt to read Ethernet header information that does not exist. This leads to the...

CVE-2026-74501

A flaw was found in the ALSA USB audio driver of the Linux kernel. A malicious USB MIDI 2.0 device can trigger a use-after-free vulnerability by causing a creation failure after an endpoint is registered. This can lead to a slab use-after-free read when the Universal MIDI Packet UMP node is...

CVE-2026-72351

A flaw was found in the Linux kernel's Generic UDP Encapsulation GUE implementation. A remote attacker could exploit a missing length validation for the remote checksum offload REMCSUM private option. By sending a specially crafted GUE packet, an attacker can cause the kernel to read beyond the...