CVE-2026-85616 — Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated u…
Published: 2026-09-04 · CVSS: 8.4 · CVSS 4.0
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for acceptances belonging to other companies by exploiting a null check on the legacy users.company_id column.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7