Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

grokability Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-88894`Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/10/2026	SeverityMedium
`CVE-2026-86774`Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86773`Snipe-IT 8.6.3 Broken Access Control via Kit Update Endpoints	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86772`Snipe-IT 8.6.3 Stored XSS via Department Names	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86771`Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86770`Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86769`Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86768`Snipe-IT before 8.7.0 Improper Input Validation via API Checkout	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86767`Snipe-IT before 8.7.0 Cross-Company Read via requested-assets	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86766`Snipe-IT 8.6.3 Race Condition via Consumable Checkout	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86765`Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86764`Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86763`snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86762`Snipe-IT before 8.7.0 Authentication Bypass via API Middleware	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86761`snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86760`snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86759`Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86758`Snipe-IT before 8.7.0 License Key Exposure via CSV Export	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86757`Snipe-IT before 8.7.0 Information Disclosure via Custom Fields	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86756`Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86755`Snipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuth	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86754`Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86753`snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86752`snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86751`Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86750`snipe-it before 8.7.0 Authorization Bypass via API User Create/Update	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86749`snipe-it before 8.7.0 Data Loss via Failed Image Write	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86748`Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86747`snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86746`Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86745`Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86744`snipe-it before 8.7.0 Race Condition in Asset Checkout	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityLow
`CVE-2026-86743`Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86742`Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86741`Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityHigh
`CVE-2026-86740`Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityMedium
`CVE-2026-86739`Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/09/2026	SeverityLow
`CVE-2026-86738`Snipe-IT before 8.7.0 CSS Injection via Custom CSS	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/08/2026	SeverityCritical
`CVE-2026-86737`snipe-it before 8.7.0 Missing Authorization via barcode endpoint	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/08/2026	SeverityMedium
`CVE-2026-86736`snipe-it before 8.7.0 Checkout Request Counter Integrity Failure	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/08/2026	SeverityMedium
`CVE-2026-86735`snipe-it before 8.7.0 SSRF via IPv6 transition address bypass	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/08/2026	SeverityMedium
`CVE-2026-86734`Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/08/2026	SeverityHigh
`CVE-2026-86733`Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published09/08/2026	SeverityHigh
`CVE-2026-85617`snipe-it before 8.6.3 Authorization Bypass via Bulk Delete	Exploitation statusNot confirmed	FixYes	Affected productsnipe-it	Published09/04/2026	SeverityHigh
`CVE-2026-85616`Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/04/2026	SeverityHigh
`CVE-2026-84206`Snipe-IT before 8.7.0 Authorization Bypass via Bulk Restore	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published09/01/2026	SeverityMedium
`CVE-2026-55694`Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityHigh
`CVE-2026-55643`Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityHigh
`CVE-2026-55703`Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-61807`Snipe-IT: Stored DOM XSS via table selected-count IDs	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-55519`Snipe-IT: Improper Authorization in File Deletion (IDOR)	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-55482`Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-55483`Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-50550`Snipe-IT: 2FA reset privilege bypass	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-49870`Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-49976`Snipe-IT: User Account Escalation via CSV Import	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/19/2026	SeverityMedium
`CVE-2026-19579`Snipe-IT Checkout Request Cancellation IDOR	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published08/11/2026	SeverityMedium
`CVE-2026-55481`Snipe-IT: CSS Injection via `header_color` Setting	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55475`Snipe-IT: Import created_by can be overwritten	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55469`Snipe-IT: Path traversal vulnerability via CSV import `image` field	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55461`Snipe-IT: Open Redirect After User Edit	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55479`Snipe-IT: Incorrect permission for legacy license checkin API	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55452`Snipe-IT: CSV formula injection in Activity Report export	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55466`Snipe-IT: Stored XSS via inline-served attachment	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55515`Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55462`Snipe-IT: Authorization bypass on print inventory page	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55464`Snipe-IT: Stored XSS via Markdown custom field	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55460`Snipe-IT: Authorization bypass on bulk editing users	Exploitation statusPublic exploit	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityHigh
`CVE-2026-55472`Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55476`Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55478`Snipe-IT: Missing object-level authorization in Kits API	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityMedium
`CVE-2026-55843`Snipe-IT: Improper Privilege Management	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityHigh
`CVE-2026-55516`Snipe-IT: Cross-company asset maintenance re-parenting via API update	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityHigh
`CVE-2026-55474`Snipe-IT: Directory traversal in displaySig	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityHigh
`CVE-2026-54329`Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published07/10/2026	SeverityHigh
`CVE-2026-48492`Snipe-IT's selectlist visibility is too permissive	Exploitation statusNot known exploited	FixNot confirmed	Affected productsnipe-it	Published07/08/2026	SeverityMedium
`CVE-2026-55542`Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL	Exploitation statusNot known exploited	FixNot confirmed	Affected productsnipe-it	Published07/08/2026	SeverityLow
`CVE-2026-48493`Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published06/23/2026	SeverityMedium
`CVE-2026-48507`Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users	Exploitation statusNot known exploited	FixNot confirmed	Affected productsnipe-it	Published06/08/2026	SeverityHigh
`CVE-2026-44833`Snipe-IT: Open redirect vulnerability	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published05/26/2026	SeverityMedium
`CVE-2026-44832`Snipe-IT: Privilege Escalation via API Permissions Assignment	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published05/26/2026	SeverityHigh
`CVE-2026-44831`Snipe-IT: XSS vulnerability in component notes	Exploitation statusNot known exploited	FixYes	Affected productsnipe-it	Published05/26/2026	SeverityMedium

82 / 82 Results

All vulnerabilities loaded

Security vulnerabilities from grokability

grokability

How many security vulnerabilities does grokability have?

Which grokability product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular grokability products

snipe-it