Medium severity4.3NVD Advisory· Published Sep 9, 2026· Updated Sep 9, 2026

CVE-2026-86761

Description

snipe-it versions before 8.7.0 contain an authorization bypass vulnerability in location print endpoints that fails to enforce per-model authorization checks. Authenticated attackers with location view permission can access printassigned and printallassigned endpoints to retrieve related users, assets, accessories, consumables, and components regardless of their individual model permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Snipeitapp/Snipe Itreferences
Grokability/Snipe Itllm-fuzzy
Range: <8.7.0

Patches

Vulnerability mechanics

References

github.com/grokability/snipe-it/commit/7865bc56e372447631b6c0d6eb6774faf896553anvd
github.com/grokability/snipe-it/security/advisories/GHSA-cg5w-9662-73vxnvd
www.vulncheck.com/advisories/snipe-it-8.6.3-before-8.7.0-authorization-bypass-via-print-endpointsnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000