CVE-2026-48492: Missing Authorization

Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, the GET /api/v1/object/selectlist API endpoint is missing an authorization check. Any user who can log into Snipe-IT - regardless of permissions - can retrieve a paginated list of all user accounts using only their web...

PT-2013-2442

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Replication Server versions 9.7 through 10.2.0.0-b113 Description The issue allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password. Recommendations Fo...