All vulnerabilities
CVE-2026-114064GHSA-wqfr-w9hp-c7v6

Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

grokability snipe-it
Open in ThreatlineRecord JSON
CVSS
5.1Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 18% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8.7.0Fixed versionCVE List
Published21 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx responses from Test Webhooks to map open ports and active hosts.

Text from CVE List

Affected versions 2

  • snipe-itaffected: all versions before 8.7.0CVE List
  • snipe-itunaffected: 8.7.0CVE List

References 2