Количество 3
Количество 3
CVE-2026-48507
Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to lock every admin out of the instance by editing the `activated` flag (which determines whether or not a user can login) and the `ldap_import` flag, which determines whether or not the user can request a password reset. Version 8.6.0 contains a patch.
CVE-2026-48507
Snipe-IT is an IT asset/license management system. A vulnerability in ...
GHSA-6f75-x745-xcpr
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-48507 Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to lock every admin out of the instance by editing the `activated` flag (which determines whether or not a user can login) and the `ldap_import` flag, which determines whether or not the user can request a password reset. Version 8.6.0 contains a patch. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-48507 Snipe-IT is an IT asset/license management system. A vulnerability in ... | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| GHSA-6f75-x745-xcpr Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
Уязвимостей на страницу