CWE-282

CVEs classified under CWE-282, newest first.

1 CVERSS

CVE-2026-86769Medium· 4.3

Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consumables checkout API endpoint that records the checkout target user's id in the created_by column instead of the authenticated caller's id

Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consumables checkout API endpoint that records the checkout target user's id in the created_by column instead of the authenticated caller's id. …

▾ Sunlitsnipeitapp · snipe-itEPSS 0.16%via NVD