PT-2026-123042

CVE-2026-116201

Published

2026-10-25

Updated

2026-10-25

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.5.0

Description A SAML assertion replay issue exists due to a non-atomic nonce check in the SAML acs handler. This allows attackers to reuse captured assertions by sending concurrent POST requests to the '/saml/acs' endpoint. By doing so, they can obtain multiple authenticated victim sessions that bypass revocation driven by the Identity Provider (IdP).

Recommendations Update to version 8.5.0 or later.

Exploitability

Exploit

Fix

Researchers

Builtbybrayden

Snipe

Vendors

Affected products

Weakness enumeration

CWE-294: Authentication Bypass by Capture-replay

Related identifiers