Security Advisory

CVE-2026-54329

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-10 18:26:44

Last updated 2026-07-10 20:58:22

Assigner GitHub_M

CVSS score 8.5

State PUBLISHED

Description

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create path mass-assigns request parameters to the Accessory model while company_id is mass assignable, allowing a low-privileged authenticated user in one company to create accessory records under another company when Full Multiple Companies Support is enabled. This issue is fixed in version 8.6.2.

← Browse all CVEs View on cve.org ↗