Skip to content
Threat Feed
Subscribe

Product

Snipe-IT

2 briefs RSS
high advisory

Snipe-IT Information Disclosure and IDOR Vulnerability

An authenticated attacker can exploit an information disclosure and IDOR vulnerability (CVE-2026-55694) in Snipe-IT to leak and download confidential, restricted EULA documents belonging to other users.

Snipe-IT
1r 1t 1c
critical threat

Multiple Vulnerabilities in Snipe-IT Allow for Code Execution and Privilege Escalation

Multiple vulnerabilities in Snipe-IT could allow an attacker to perform cross-site scripting attacks, redirect users to malicious websites, gain administrator rights, or execute arbitrary code.

exploited Snipe-IT xss code execution
2r 2t