Beveiligingsadvies

CVE-2026-48507

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-08 15:41:01

Laatst bijgewerkt 2026-08-21 19:59:42

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to lock every admin out of the instance by editing the `activated` flag (which determines whether or not a user can login) and the `ldap_import` flag, which determines whether or not the user can request a password reset. Version 8.6.0 contains a patch.

← Alle CVE's bekijken Bekijk op cve.org ↗