Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, POST /api/v1/kits/{kit_id}/licenses checks whether the caller can edit kits but does not authorize access to the referenced license object, allowing a low-privilege user with predefined-kit permissions to bind a license they should not be able to access or manage into a kit. This issue is fixed in version 8.6.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-10 | 2 | Disclosure2 |
| 2026-07-13 | 1 | Disclosure1 |
🟠 Snipe-IT Missing Object-Level Authorization, #CVE-2026-55478 (MEDIUM) -DC-Jul2026-881 https://dailycve.com/snipe-it-missing-object-level-authorization-cve-2026-55478-medium-dc-jul2026-881/
Post summary
A new vulnerability, CVE-2026-55478, affecting Snipe-IT’s object-level authorization is disclosed as a MEDIUM severity issue, with no evidence of PoC, exploit code, or active exploitation.
🚨*CVE* CVE-2026-55478 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, POST /api/v1/kits/{kit_id}/licenses checks whether the caller can edit kits but does not authorize … https://www.cve.org/CVERecord?id=CVE-2026-55478 ----- Traducción: CVE-2026-55478 Sni… http://infoflow.cloud`
Post summary
A brief disclosure of CVE-2026-55478 in Snipe-IT, noting an authorization flaw in the licenses API before v8.6.2.
CVE-2026-55478 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, POST /api/v1/kits/{kit_id}/licenses checks whether the caller can edit kits but does not authorize … https://www.cve.org/CVERecord?id=CVE-2026-55478
Post summary
The text references CVE-2026-55478 in Snipe‑IT, noting that the POST endpoint only checks kit edit permissions and fails to enforce proper authorization, revealing an access control weakness.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | snipeitapp | snipe-it | - | - | - |