CVE-2026-86771 | Grokability Snipe-IT up to 8.6.x PDF Generator writeHTML employee_num server-side request forgery

A vulnerability categorized as problematic has been discovered in Grokability Snipe-IT up to 8.6.x. This affects the function writeHTML of the component PDF Generator. The manipulation of the argument employee_num results in server-side request forgery.

This vulnerability is identified as CVE-2026-86771. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More