https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T00:00:44.510675+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-48507 CVE-2026-48507 — Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users 2026-10-13T00:00:44.511772+00:00

Affected: grokability snipe-it

Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to lock every admin out of the instance by editing the `activated` flag (which determines whether or not a user can login) and the `ldap_import` flag, which determines whether or not the user can request a password reset. Version 8.6.0 contains a patch.