CVE-2026-86742 Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report

Snipe-IT through 8.6.3 does not neutralize formula elements in the "unaccepted assets" acceptance report CSV export. ReportsController::postAssetAcceptanceReport builds the CSV by hand stripping commas and joining rows manually and, unlike the six sibling exports in the same controller, never...

CVE-2026-86742

Snipe-IT versions through 8.6.3 are vulnerable to CSV formula injection via the unaccepted assets acceptance report export. The ReportsController::postAssetAcceptanceReport method builds the CSV by hand without applying League\Csv\EscapeFormula or honoring the app.escape_formulas config, unlike s...

CVE-2026-86742 Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report

Snipe-IT through 8.6.3 does not neutralize formula elements in the "unaccepted assets" acceptance report CSV export. ReportsController::postAssetAcceptanceReport builds the CSV by hand stripping commas and joining rows manually and, unlike the six sibling exports in the same controller, never...

CVE-2026-76202

creationtimestamp| type| source ---|---|--- 2026-09-09 11:49:09+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv3hs62yqe2t 2026-09-13 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvfzqtnhay2j...

CVE-2023-25515

creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:08+00:00| seen| https://t.me/IntelEncyclopedia/3299 2026-09-10 00:00:48+00:00| seen| https://t.me/IntelEncyclopedia/3299...

CVE-2026-19651

creationtimestamp| type| source ---|---|--- 2026-09-09 04:25:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv2oyduhsy2t...

CVE-2026-7804

creationtimestamp| type| source ---|---|--- 2026-09-09 03:46:52+00:00| seen| https://bsky.app/profile/suriq.io/post/3mv2mts7vjd2t...

CVE-2026-61909

Cyrus IMAP before 3.12.4 (backported to 3.10.4 and 3.8.8) contains an ACL bypass in its CalDAV/CardDAV multiget functionality. An authenticated DAV user who holds some shared access to another user's calendar or address book can read unshared events or contacts by including target hrefs in a cale...

CVE-2026-84197

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv224ku6z62t 2026-09-09 12:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3k3gs4w22y...

CVE-2026-69498

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:09+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:03+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:19:03+00:00|...

CVE-2026-69606

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:31+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:16+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:48:42+00:00|...

CVE-2026-69465

creationtimestamp| type| source ---|---|--- 2026-09-08 22:00:55+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:49+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:45:23+00:00|...

CVE-2026-70296

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzth2jf7k22 2026-09-08 20:19:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:01:41+00:00| seen|...

CVE-2026-86675

creationtimestamp| type| source ---|---|--- 2026-09-08 19:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/essxks3w5rnvz...

EUVD-2026-57222

Prowler: Stored XSS in HTML reports through unescaped cloud resource tags...

CVE-2026-82067

creationtimestamp| type| source ---|---|--- 2026-09-08 18:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmjw5edt2g 2026-09-08 20:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzsr6ive22r 2026-09-10 01:02:00+00:00| seen|...

CVE-2026-86729

creationtimestamp| type| source ---|---|--- 2026-09-08 18:08:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmj5cswe2r 2026-09-08 20:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzsr7utbc2t...

CVE-2026-77120

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/apgqf2kdfuep5...

CVE-2026-73314

creationtimestamp| type| source ---|---|--- 2026-09-08 15:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gdjs4b2wvs3ob 2026-09-15 00:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvjdegeyaj2y...

CVE-2026-78234

creationtimestamp| type| source ---|---|--- 2026-09-08 12:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117235307505120412 2026-09-08 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3muyxxlx3bk2z 2026-09-08 14:07:37+00:00| seen|...