Snipeitapp Snipe-It vulnerabilities
135 published vulnerabilities in Snipeitapp Snipe-It. The most were published in 2026 (91), and 91 so far in 2026.
Snipeitapp Snipe-It vulnerabilities by year
2019
2021
2022
2023
2024
2025
2026
Most exploited Snipeitapp Snipe-It vulnerabilities
- CVE-2025-63601 File upload in n/a
- CVE-2026-37709 Snipe-IT has insecure permissions in file uploads
- CVE-2026-86738 Snipe-IT before 8.7.0 CSS Injection via Custom CSS
- CVE-2026-116199 Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback
- CVE-2022-1380 Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it
- CVE-2022-1445 Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it
- CVE-2022-23064 Snipe-IT - Host Header Injection
- CVE-2026-116201 Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
- CVE-2026-63498 Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
- CVE-2026-85617 snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
- CVE-2026-44832 Snipe-IT: Privilege Escalation via API Permissions Assignment
- CVE-2025-15602 Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.