Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

grokability — Vulnerabilities & Security Advisories 85

Browse all 85 CVE security advisories affecting grokability. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This aggregation page catalogs security vulnerabilities associated with the vendor grokability. The collection compiles records of defects across the vendor’s software and hardware products, covering advisories issued within a defined historical time range. Readers can use this index to track the vendor’s disclosed security notices, analyze the distribution of specific weakness classes, and review the complete vulnerability history for individual product lines. The data is organized to support risk assessment, patch planning, and the study of recurring defect patterns within the grokability ecosystem.

Top products by grokability: snipe-it
CVE ID Title CVSS Severity Published
CVE-2026-55481 Snipe-IT: CSS Injection via `header_color` Setting — snipe-it CWE-79 - - 2026-07-10
CVE-2026-55475 Snipe-IT: Import created_by can be overwritten — snipe-it CWE-863 5.7 Medium 2026-07-10
CVE-2026-55469 Snipe-IT: Path traversal vulnerability via CSV import `image` field — snipe-it CWE-22 6.5 Medium 2026-07-10
CVE-2026-55461 Snipe-IT: Open Redirect After User Edit — snipe-it CWE-601 6.1 Medium 2026-07-10
CVE-2026-55479 Snipe-IT: Incorrect permission for legacy license checkin API — snipe-it CWE-863 - - 2026-07-10
CVE-2026-55452 Snipe-IT: CSV formula injection in Activity Report export — snipe-it CWE-1236 - - 2026-07-10
CVE-2026-55466 Snipe-IT: Stored XSS via inline-served attachment — snipe-it CWE-79 - - 2026-07-10
CVE-2026-55515 Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint — snipe-it CWE-639 5.0 Medium 2026-07-10
CVE-2026-55462 Snipe-IT: Authorization bypass on print inventory page — snipe-it CWE-863 4.3 Medium 2026-07-10
CVE-2026-55464 Snipe-IT: Stored XSS via Markdown custom field — snipe-it CWE-79 - - 2026-07-10
CVE-2026-55460 Snipe-IT: Authorization bypass on bulk editing users — snipe-it CWE-863 7.1 High 2026-07-10
CVE-2026-55472 Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation — snipe-it CWE-863 4.3 Medium 2026-07-10
CVE-2026-55476 Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter — snipe-it CWE-862 - - 2026-07-10
CVE-2026-55478 Snipe-IT: Missing object-level authorization in Kits API — snipe-it CWE-639 - - 2026-07-10
CVE-2026-55843 Snipe-IT: Improper Privilege Management — snipe-it CWE-269 - - 2026-07-10
CVE-2026-55516 Snipe-IT: Cross-company asset maintenance re-parenting via API update — snipe-it CWE-639 7.7 High 2026-07-10
CVE-2026-55474 Snipe-IT: Directory traversal in displaySig — snipe-it CWE-23 - - 2026-07-10
CVE-2026-54329 Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API — snipe-it CWE-862 8.5 High 2026-07-10
CVE-2026-48492 Snipe-IT's selectlist visibility is too permissive — snipe-it CWE-862 - - 2026-07-08
CVE-2026-55542 Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL — snipe-it CWE-862 - - 2026-07-08
CVE-2026-48493 Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment — snipe-it CWE-863 5.5 Medium 2026-06-23
CVE-2026-48507 Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users — snipe-it CWE-863 7.1 High 2026-06-08
CVE-2026-44833 Snipe-IT: Open redirect vulnerability — snipe-it CWE-601 5.9 Medium 2026-05-26
CVE-2026-44832 Snipe-IT: Privilege Escalation via API Permissions Assignment — snipe-it CWE-281 - - 2026-05-26
CVE-2026-44831 Snipe-IT: XSS vulnerability in component notes — snipe-it CWE-79 4.8 Medium 2026-05-26

This page lists every published CVE security advisory associated with grokability. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.