CVE-2026-86769 | Grokability Snipe-IT up to 8.6.x Consumables Checkout API Endpoint created_by permission

September 9, 2026 Yanac

A vulnerability classified as problematic was found in Grokability Snipe-IT up to 8.6.x. Impacted is an unknown function of the component Consumables Checkout API Endpoint. Executing a manipulation of the argument created_by can lead to permission issues.

This vulnerability appears as CVE-2026-86769. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More