CVE-2026-114064
Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint
- State
- Published
- Severity
- 5.1 Medium
- Published
- Oct 21, 2026
- Updated
- Oct 28, 2026
- Reserved
- Oct 20, 2026
Description
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx responses from Test Webhooks to map open ports and active hosts.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:L | VulnCheck |
| 3.1 | 5.5 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L | VulnCheck |
Weaknesses
- CWE-203 Observable Discrepancy
Affected Products
| Product | Versions |
|---|---|
snipe-itgrokability |
|
References
- GitHub Security Advisory (GHSA-wqfr-w9hp-c7v6)vendor-advisory
- VulnCheck Advisory: Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpointthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.