Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenances/{maintenance_id} checks access to the current maintenance record and asset but then fills attacker-controlled fields including asset_id without re-authorizing the newly supplied asset, allowing an authorized user to move a maintenance record onto an asset outside their company scope. This issue is fixed in version 8.6.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-10 | 2 | Disclosure2 |
| 2026-07-13 | 1 | Disclosure1 |
🔴 Snipe-IT, Authorization Bypass Through User-Controlled Key, #CVE-2026-55516 (High) -DC-Jul2026-895 https://dailycve.com/snipe-it-authorization-bypass-through-user-controlled-key-cve-2026-55516-high-dc-jul2026-895/
Post summary
A new high‑severity authorization bypass CVE, CVE‑2026‑55516, has been disclosed for Snipe‑IT, but no PoC, exploit, or mitigation information is provided.
🚨*CVE* CVE-2026-55516 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenances/{maintenance_id} checks access to the current maintenance record … https://www.cve.org/CVERecord?id=CVE-2026-55516 ----- Traducción: CVE-2026-55516 Sni… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑55516 in Snipe‑IT, outlining an access‑control vulnerability and noting that version 8.6.2 fixes the issue.
CVE-2026-55516 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenances/{maintenance_id} checks access to the current maintenance record … https://www.cve.org/CVERecord?id=CVE-2026-55516
Post summary
The text announces CVE‑2026‑55516, describing an access control flaw in Snipe‑IT’s maintenance API, but provides no exploit code, patch details, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | snipeitapp | snipe-it | - | - | - |