Skip to content
OpenAdvisories
High WID-SEC-2026-3829 4 CVEs

Snipe-IT: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Oct 25, 2026 · Revision 2 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Benutzerrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren.

Product

Snipe-IT ist eine webbasierte Open-Source-Asset-Management-Software, die Unternehmen bei der Verfolgung von Hardware und Software unterstützt.

Vulnerabilities 4

  • High 8.8
    CVE-2026-116201

    Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

    Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured …

    grokability snipe-it
  • High 8.1
    CVE-2026-116199

    Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback

    Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with email-shaped usernames a…

    grokability snipe-it
  • Medium 5.9
    CVE-2026-116200

    Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

    Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-…

    grokability snipe-it
  • Medium 4.3
    CVE-2026-116198

    Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store

    Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encrypted_custom_fields. Authenticated API users without that perm…

    grokability snipe-it

Revision history

  1. #2

    Referenz(en) aufgenommen: CVE-2026-116201, EUVD-2026-109459, CVE-2026-116199, EUVD-2026-109457, CVE-2026-116200, EUVD-2026-109458, CVE-2026-116198, EUVD-2026-109456

  2. #1

    Initiale Fassung

References