CVE-2026-86735

5.0 Moyenne

Publiée le 08/09/2026 à 18:18 · Modifiée le 09/09/2026 à 15:45 · Analysée par le NVD · Source : disclosure@vulncheck.com

Description

snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo transition addresses to bypass SSRF guards and access internal services or cloud metadata endpoints.

Traduire en français

Produits concernés

Scores CVSS

Version	Score	Source	Vecteur
4.0	5.9 Moyenne	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	5.0 Moyenne	disclosure@vulncheck.com (NVD)	`CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N`

Faiblesses (CWE)

CWE-918

Références

https://github.com/grokability/snipe-it/security/advisories/GHSA-5j6m-rr83-rpj7 Vendor AdvisoryMitigation
https://www.vulncheck.com/advisories/snipe-it-before-8.7.0-ssrf-via-ipv6-transition-address-bypass Third Party Advisory

CVE-2026-86735

Description

Produits concernés

Scores CVSS

Faiblesses (CWE)

Références

Ailleurs