GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

christopherfi-dev

9 vulnerability records and advisories credit this contributor.

CVE-2026-86747
snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User
CVE-2026-86750
snipe-it before 8.7.0 Authorization Bypass via API User Create/Update
CVE-2026-86749
snipe-it before 8.7.0 Data Loss via Failed Image Write
CVE-2026-86748
Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive
CVE-2026-86744
snipe-it before 8.7.0 Race Condition in Asset Checkout
CVE-2026-86741
Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
CVE-2026-86740
Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains
CVE-2026-86739
Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence
CVE-2026-86738
Snipe-IT before 8.7.0 CSS Injection via Custom CSS