G
Vendor security profile
Grokability
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs44
Critical0
CISA KEV0
Public exploit32
Patch rate%59
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
11
32
0
CVE KEV
CVE severity distribution
44toplam CVE
High18 (41%)
Medium24 (55%)
Low2 (5%)
Patch and exploitation view
%59
Verified patch
%0
CISA KEV
%73
Public exploit
26Patch available
0Partial
0Workaround
0Vendor: no patch
18Unknown
Latest vulnerabilities
8.1
CVE-2026-62368
Snipe-IT: Stored XSS via Custom Field name in asset-list column headers
G
Patch verifiedEPSS %0
8.6
CVE-2026-63493
Snipe-IT: 2FA bypass via the API token flow
G
Patch verifiedEPSS %0
8.7
CVE-2026-63498
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
G
Patch verifiedEPSS %0
5.3
CVE-2026-88894
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout
G
Patch verifiedEPSS %0
5.3
CVE-2026-86774
Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy
G
Patch status unknownEPSS %0
5.1
CVE-2026-86772
Snipe-IT 8.6.3 Stored XSS via Department Names
G
Patch status unknownEPSS %0
8.6
CVE-2026-86770
Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation
G
Patch status unknownEPSS %1
5.3
CVE-2026-86769
Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout
G
Patch status unknownEPSS %0
5.3
CVE-2026-86767
Snipe-IT before 8.7.0 Cross-Company Read via requested-assets
G
Patch status unknownEPSS %0
7.1
CVE-2026-86765
Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint
G
Patch verifiedEPSS %0