Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

grokability — Vulnerabilities & Security Advisories 85

Browse all 85 CVE security advisories affecting grokability. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This aggregation page catalogs security vulnerabilities associated with the vendor grokability. The collection compiles records of defects across the vendor’s software and hardware products, covering advisories issued within a defined historical time range. Readers can use this index to track the vendor’s disclosed security notices, analyze the distribution of specific weakness classes, and review the complete vulnerability history for individual product lines. The data is organized to support risk assessment, patch planning, and the study of recurring defect patterns within the grokability ecosystem.

Top products by grokability: snipe-it
CVE ID Title CVSS Severity Published
CVE-2026-86748 Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive — snipe-it CWE-460 6.1 Medium 2026-09-09
CVE-2026-86746 Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay — snipe-it CWE-269 6.4 Medium 2026-09-09
CVE-2026-86747 snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User — snipe-it CWE-863 5.4 Medium 2026-09-09
CVE-2026-86745 Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export — snipe-it CWE-1236 6.5 Medium 2026-09-09
CVE-2026-86744 snipe-it before 8.7.0 Race Condition in Asset Checkout — snipe-it CWE-362 2.2 Low 2026-09-09
CVE-2026-86743 Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report — snipe-it CWE-639 5.0 Medium 2026-09-09
CVE-2026-86742 Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report — snipe-it CWE-1236 6.5 Medium 2026-09-09
CVE-2026-86741 Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA — snipe-it CWE-73 8.5 High 2026-09-09
CVE-2026-86739 Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence — snipe-it CWE-252 3.1 Low 2026-09-09
CVE-2026-86740 Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains — snipe-it CWE-212 3.8 Low 2026-09-09
CVE-2026-86738 Snipe-IT before 8.7.0 CSS Injection via Custom CSS — snipe-it CWE-79 8.7 High 2026-09-08
CVE-2026-86737 snipe-it before 8.7.0 Missing Authorization via barcode endpoint — snipe-it CWE-862 4.3 Medium 2026-09-08
CVE-2026-86736 snipe-it before 8.7.0 Checkout Request Counter Integrity Failure — snipe-it CWE-682 4.3 Medium 2026-09-08
CVE-2026-86734 Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field — snipe-it CWE-400 6.5 Medium 2026-09-08
CVE-2026-86735 snipe-it before 8.7.0 SSRF via IPv6 transition address bypass — snipe-it CWE-918 5.0 Medium 2026-09-08
CVE-2026-86733 Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore — snipe-it CWE-78 7.2 High 2026-09-08
CVE-2026-85617 snipe-it before 8.6.3 Authorization Bypass via Bulk Delete — snipe-it CWE-639 8.8 High 2026-09-04
CVE-2026-85616 Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance — snipe-it CWE-639 8.5 High 2026-09-04
CVE-2026-84206 Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore — snipe-it CWE-863 4.3 Medium 2026-09-01
CVE-2026-55694 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover — snipe-it CWE-639 7.1 High 2026-08-19
CVE-2026-55643 Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode — snipe-it CWE-863 7.6 High 2026-08-19
CVE-2026-55703 Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET — snipe-it CWE-862 4.3 Medium 2026-08-19
CVE-2026-61807 Snipe-IT: Stored DOM XSS via table selected-count IDs — snipe-it CWE-79 6.3 Medium 2026-08-19
CVE-2026-55519 Snipe-IT: Improper Authorization in File Deletion (IDOR) — snipe-it CWE-285 5.4 Medium 2026-08-19
CVE-2026-55482 Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update — snipe-it CWE-639 6.3 Medium 2026-08-19
CVE-2026-55483 Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation — snipe-it CWE-862 4.9 Medium 2026-08-19
CVE-2026-50550 Snipe-IT: 2FA reset privilege bypass — snipe-it CWE-863 5.8 Medium 2026-08-19
CVE-2026-49870 Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor` — snipe-it CWE-770 5.9 Medium 2026-08-19
CVE-2026-49976 Snipe-IT: User Account Escalation via CSV Import — snipe-it CWE-863 6.5 Medium 2026-08-19
CVE-2026-19579 Snipe-IT Checkout Request Cancellation IDOR — Snipe-IT CWE-639 5.4 Medium 2026-08-11

This page lists every published CVE security advisory associated with grokability. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.