CVE-2026-86735EPSS p22.1%

CVE-2026-86735CVE-2026-86735

snipeitapp / snipe-it

Description

snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo transition addresses to bypass SSRF guards and access internal services or cloud metadata endpoints.

Scoring

CVSS 5.0 ()
VectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N
EPSS0.31% probability of exploitation · percentile 22.1% · 2026-10-05T12:00:23Z
Last modified2026-09-09
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.