PT-2026-89017
CVE-2026-86748
·
تاريخ النشر
2026-09-09
·
تاريخ التحديث
2026-09-09
الوصف من
CVSS 4.0
6.9
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Snipe-IT versions prior to 8.7.0
Description
The software wipes the database before validating the uploaded backup archive in the restore endpoint. If a superuser uploads a corrupted or invalid zip file, it triggers permanent data loss because there is no recovery path or rollback mechanism.
Recommendations
Update to version 8.7.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾