https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:23:26.187736+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365640 EUVD-2026-365640 2026-10-02T14:23:26.190453+00:00 EUVD-2026-365640 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86748 fkie_cve-2026-86748 2026-10-02T14:23:26.190485+00:00

Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger permanent data loss with no recovery path or rollback mechanism.

 https://cve.radiocsirt.org/vuln/ghsa-4872-6frw-cgwv GHSA-4872-6frw-cgwv 2026-10-02T14:23:26.190521+00:00

Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger permanent data loss with no recovery path or rollback mechanism.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2981 WID-SEC-W-2026-2981 — Snipe-IT: Mehrere Schwachstellen 2026-10-02T14:23:26.190539+00:00

Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe zu starten, sensible Informationen offenzulegen, Daten zu manipulieren, Konten zu übernehmen oder Denial-of-Service-Zustände herbeizuführen.