CVE-2026-114064— Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint
Quick assessment
Affected
grokability snipe-it
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
8.7.0 之前的 Snipe-IT 版本在 Webhook 测试功能中存在服务器端请求伪造（SSRF）漏洞。该漏洞允许超级管理员用户探测内部网络地址，包括回环地址和 RFC1918 定义的私有地址段。攻击者可将 Webhook 指向内部主机及端口，并通过对比“测试 Webhook"功能返回的 4xx 与 5xx 响应，从而映射出开放的端口和活跃的主机。
Possible ATT&CK Techniques 2 AI
T1046 · Network Service Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-114064
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx responses from Test Webhooks to map open ports and active hosts.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
通过差异性导致的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| grokability | snipe-it | 0 ~ 8.7.0 | - |
|
II. Public POCs for CVE-2026-114064
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-114064
请登录查看更多情报信息。
Other References for CVE-2026-114064 (2)
IV. Related Vulnerabilities
Same product: snipe-it
-
CVE-2026-62368
Snipe-IT: Stored XSS via Custom Field name in asset-list col -
CVE-2026-63493
Snipe-IT: 2FA bypass via the API token flow -
CVE-2026-63498
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploade -
CVE-2026-88894
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Ki -
CVE-2026-86774
Snipe-IT before 8.7.0 Broken Access Control via AssetModelPo
Same vendor: grokability
-
CVE-2026-62368
Snipe-IT: Stored XSS via Custom Field name in asset-list col -
CVE-2026-63493
Snipe-IT: 2FA bypass via the API token flow -
CVE-2026-63498
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploade -
CVE-2026-88894
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Ki -
CVE-2026-86774
Snipe-IT before 8.7.0 Broken Access Control via AssetModelPo
Same weakness: CWE-203
-
CVE-2025-13591
Username Enumeration via Authentication Endpoint in WSO2 Ide -
CVE-2026-111933
Coder before 2.34.2 User Enumeration via Login Placeholder H -
CVE-2026-18560
Improper order of authorisations in Mattermost GetFile API l -
CVE-2026-110141
Chrome <155.0.8059.79跨域数据泄露漏洞 -
CVE-2026-97788
Active Directory Federation Services (AD FS) Information Dis
V. Comments for CVE-2026-114064
No comments yet