Skip to content
OpenAdvisories
High WID-SEC-2026-1377 4 CVEs

Snipe-IT: Mehrere Schwachstellen

Published May 5, 2026 · Updated May 26, 2026 · Revision 2 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, Benutzer auf bösartige Websites umzuleiten, Administratorrechte zu erlangen oder beliebigen Code auszuführen.

Product

Snipe-IT ist eine webbasierte Open-Source-Asset-Management-Software, die Unternehmen bei der Verfolgung von Hardware und Software unterstützt.

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-37709

    Snipe-IT has insecure permissions in file uploads

    Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the app/Http/Controllers/Api/UploadedFilesController.php component

    snipe/snipe-it Packagist
  • High 8.7
    CVE-2026-44832

    Snipe-IT: Privilege Escalation via API Permissions Assignment

    Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated user with only users.edit permission can escalate their own privileges to admin by sending a PATCH request to /api/v1/users/{id} with permissions[admin]=1. The API controller…

    grokability snipe-it snipe/snipe-it Packagist
  • Medium 5.9
    CVE-2026-44833

    Snipe-IT: Open redirect vulnerability

    Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an open redirect vulnerability in Snipe-IT allows attackers to redirect users to malicious sites via unvalidated HTTP Referer header stored in session variable. This vulnerability is fixed in …

    grokability snipe-it snipe/snipe-it Packagist
  • Medium 4.8
    CVE-2026-44831

    Snipe-IT: XSS vulnerability in component notes

    Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scripting (XSS). This vulnerability is fixed in 8.4.1.

    grokability snipe-it snipe/snipe-it Packagist

Revision history

  1. #2

    CVE-Nummern ergänzt

  2. #1

    Initiale Fassung

References