CVE-2026-116198 | Grokability Snipe-IT up to 8.6.x AssetsController store missing encryption

October 25, 2026 Yanac

A vulnerability has been found in Grokability Snipe-IT up to 8.6.x and classified as problematic. Affected by this vulnerability is the function ApiAssetsController::store of the component AssetsController. Performing a manipulation results in missing encryption of sensitive data.

This vulnerability is identified as CVE-2026-116198. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More