CVE-2026-86742 | Grokability Snipe-IT up to 8.6.3 CSV Export ReportsController.php postAssetAcceptanceReport csv injection

September 9, 2026 Yanac

A vulnerability was found in Grokability Snipe-IT up to 8.6.3. It has been rated as problematic. This vulnerability affects the function ReportsController::postAssetAcceptanceReport of the file app/Http/Controllers/ReportsController.php of the component CSV Export. The manipulation leads to csv injection.

This vulnerability is listed as CVE-2026-86742. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More