[ Vendor · 4 CVEs ]
grokability
CVEs affecting grokability published in the last 30 days, plus any grokability CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114064 | 21 Oct 2026 | CVSS 5.5 | grokability snipe-itSnipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe… | |
| CVE-2026-62368 | 24 Sep 2026 | CVSS 8.4 | Snipe-IT: Stored XSS via Custom Field name in asset-list column headersSnipe-IT is an IT asset/license management system. Prior to 8.7.0, a user with the customfields.create permission can store markup in… | Fix |
| CVE-2026-63493 | 24 Sep 2026 | CVSS 8.1 | Snipe-IT: 2FA bypass via the API token flowSnipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission can reach… | Fix |
| CVE-2026-63498 | 24 Sep 2026 | CVSS 5.4 | Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files APISnipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/{object_type}/{id}/files/{file_id}… | Fix |