Skip to content
OpenAdvisories

Vendor

snapotter-hq

1 known vulnerabilities.

Products

SnapOtter 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-109562

    SnapOtter 1.15.10 through 2.2.0 Missing Authorization via Upload and Preview API

    SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission checks. Attackers holding even a settin…

    snapotter-hq SnapOtter