Grokability vulnerabilities
91 CVEs and advisories name Grokability as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-86753snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint
- CVE-2026-86752snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints
- CVE-2026-86751Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown
- CVE-2026-86750snipe-it before 8.7.0 Authorization Bypass via API User Create/Update
- CVE-2026-86749snipe-it before 8.7.0 Data Loss via Failed Image Write
- CVE-2026-86748Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive
- CVE-2026-86747snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User
- CVE-2026-86746Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay
- CVE-2026-86745Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export
- CVE-2026-86744snipe-it before 8.7.0 Race Condition in Asset Checkout
- CVE-2026-86743Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report
- CVE-2026-86742Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report
- CVE-2026-86741Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
- CVE-2026-86740Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains
- CVE-2026-86739Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence
- CVE-2026-86738Snipe-IT before 8.7.0 CSS Injection via Custom CSS
- CVE-2026-86737snipe-it before 8.7.0 Missing Authorization via barcode endpoint
- CVE-2026-86736snipe-it before 8.7.0 Checkout Request Counter Integrity Failure
- CVE-2026-86735snipe-it before 8.7.0 SSRF via IPv6 transition address bypass
- CVE-2026-86734Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field
- CVE-2026-86733Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore
- CVE-2026-85617snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
- CVE-2026-85616Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
- CVE-2026-84206Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore
- CVE-2026-55694Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
- CVE-2026-55643Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode
- CVE-2026-55703Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
- CVE-2026-61807Snipe-IT: Stored DOM XSS via table selected-count IDs
- CVE-2026-55519Snipe-IT: Improper Authorization in File Deletion (IDOR)
- CVE-2026-55482Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update