CVE-2026-86739

Snipe-IT 8.6.3 and earlier do not check the return value of Storage::put when writing the signature PNG and the generated acceptance PDF in Account\AcceptanceController::store. On filesystem drivers that return false instead of throwing on a write failure for example the local disk with restricti...

CVE-2026-86739

Snipe-IT versions 8.6.3 and earlier contain a defect in Account\AcceptanceController::store() where the return value of Storage::put() is not checked when writing the signature PNG and generated acceptance PDF . On filesystem drivers that silently return false on write failure (e.g., restrictive ...