CVE-2026-86766 | Grokability Snipe-IT up to 8.6.3 Consumable Checkout checkout toctou

September 9, 2026 Yanac

A vulnerability classified as problematic has been found in Grokability Snipe-IT up to 8.6.3. This issue affects some unknown processing of the file /api/v1/consumables/{consumable_id}/checkout of the component Consumable Checkout. Performing a manipulation results in time-of-check time-of-use.

This vulnerability is reported as CVE-2026-86766. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More