grokability has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was October 2026 with 5. The median CVSS is 5.9 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-116201High· 8.8Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition48CVE-2026-116199High· 8.1Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback45CVE-2026-116200Medium· 5.9Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()32CVE-2026-114064Medium· 5.5Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint30CVE-2026-116198Medium· 4.3Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store24
grokability vulnerabilities
CVEs affecting grokability, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-116200Medium· 5.9Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-accoun…
CVE-2026-116199High· 8.1Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback
Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with em…
CVE-2026-116198Medium· 4.3Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store
Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encrypted_custom_fields. Authenticated API u…
CVE-2026-116201High· 8.8Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/…
CVE-2026-114064Medium· 5.5Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webho…