Medium severityNVD Advisory· Published Jun 23, 2026
Snipe-IT has a 2FA reset privilege bypass
CVE-2026-50550
Description
Impact
A user who can edit other users could reset a superadmin's 2FA.
Patches
Patched in 8.5.0
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
snipe/snipe-itPackagist | < 8.5.0 | 8.5.0 |
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.