CVE-2026-55542

Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, Snipe-IT S3 signature image retrieval lacks authorization before temporary URL. On S3-backed deployments, authenticated users who know a signature filename can obtain a 5-minute signed S3 URL because the S3 branch returns before the `authorize()` call used by the local-file branch. Version 8.6.1 contains a patch.

• CWE-862

• https://github.com/grokability/snipe-it/commit/ded6515cbc27a28f07395da318483c2e96263259Patch
• https://github.com/grokability/snipe-it/security/advisories/GHSA-6mmj-jhqj-6c6qPatch, Vendor Advisory

Published

Jul 8, 2026

Last Modified

Jul 10, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55537PraisonAI is a multi-agent teams system. Prior to praisonai …7.1
• CVE-2026-55538PraisonAI is a multi-agent teams system. Prior to praisonai …7.3
• CVE-2026-55539PraisonAI is a multi-agent teams system. Prior to praisonai …8.6
• CVE-2026-5554A security flaw has been discovered in code-projects Concert…7.3
• CVE-2026-55540PraisonAI is a multi-agent teams system. Prior to praisonai …7.1
• CVE-2026-55541PraisonAI is a multi-agent teams system. Prior to praisonai …8.8
• CVE-2026-55544NextCRM is open-source customer relationship management (CRM…7.6
• CVE-2026-55545Yamcs is a mission control framework. Prior to 5.12.8 and 5.…6.5
• CVE-2026-55546QWED-MCP is a deterministic verification gateway for MCP. Pr…9.8
• CVE-2026-55547Yamcs is a mission control framework. Prior to 5.12.8 and 5.…4.3
• CVE-2026-55548Yamcs is a mission control framework. Prior to 5.12.8 and 5.…4.3
• CVE-2026-55549Yamcs is a mission control framework. Prior to 5.9.4, Yamcs …6.5