점검 대응높음KEV 미등록
CVE-2026-55516
grokability snipe-it 취약점
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenances/{maintenance_id} checks access to the current maintenance record and asset but then fills attacker-controlled fields including asset_id without re-authorizing the newly supplied asset, allowing an authorized user to move a maintenance record onto an asset outside their company scope. This issue is fixed in version 8.6.2.
- 대응 우선순위
- 점검
- CVSS
- 7.7
- EPSS
- 0.22% 백분위 12.4% · 2026.07.28 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.07.11