CVE-2026-85617
Last modified
CVE-2026-85617 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allows restricted users to soft-delete users outside their authorized scope. Attackers can include unauthorized user IDs in bulk delete requests to bypass instance-level restrictions and modify or disable accounts they should not access.. EPSS estimates a 0.26% chance of exploitation in the next 30 days.
Description
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allows restricted users to soft-delete users outside their authorized scope. Attackers can include unauthorized user IDs in bulk delete requests to bypass instance-level restrictions and modify or disable accounts they should not access.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Snipeitapp | Snipe-It | < 8.6.3 |
References
- https://github.com/grokability/snipe-it/security/advisories/GHSA-mx3g-8v84-j6ggExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-85617?
How severe is CVE-2026-85617?
How do I fix CVE-2026-85617?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-85611OpenPanel before 2.3.0 contains a cross-tenant broken object…6.4
- CVE-2026-85612OpenPanel before 2.3.0 contains an unauthenticated server-si…7.5
- CVE-2026-85613OpenPanel before 2.3.0 contains a cross-site scripting vulne…8.2
- CVE-2026-85614OpenPanel before 2.3.0 contains an unauthenticated server-si…8.6
- CVE-2026-85615Openpanel before 2.3.0 contains an insecure direct object re…6.4
- CVE-2026-85616Snipe-IT versions before 8.6.2 contain an authorization bypa…8.5
- CVE-2026-85618ConvertX 0.17.0 contains an arbitrary file read vulnerabilit…6.5
- CVE-2026-85619AppFlowy-Cloud 0.9.64 fails to verify that requested collab …7.5
- CVE-2026-8562Side-channel information leakage in Navigation in Google Chr…4.3
- CVE-2026-85620Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vul…8.6
- CVE-2026-85621LobeChat (LobeHub) 2.2.1 does not properly verify inbound ch…6.5
- CVE-2026-85622AppFlowy-Cloud through 0.9.64 fails to validate workspace me…5.3
Are you affected by CVE-2026-85617?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST