PT-2026-51620 · Snipe-It · Snipe-It

Published 2026-06-23 · Updated 2026-06-24 · CVE-2026-50550

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.5.0

Description A missing authorization issue allows a user with permissions to edit other users to reset the two-factor authentication (2FA) of a superadmin.

Recommendations Update to version 8.5.0.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-50550

GHSA-6X4J-8954-5HXM

Affected Products

Snipe-It

References · 4

• https://osv.dev/vulnerability/GHSA-6x4j-8954-5hxm · Vendor Advisory
• https://github.com/grokability/snipe-it · Note
• https://github.com/grokability/snipe-it/security/advisories/GHSA-6x4j-8954-5hxm · Note
• https://twitter.com/dailycve/status/2069578989769814165 · Twitter Post