What’s Vulnerable › Vulnerabilities

CVE-2026-114064: Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-21 · updated 2026-10-28
• Weakness: CWE-203

Description

Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx responses from Test Webhooks to map open ports and active hosts.

Affected products

• grokability snipe-it: before 8.7.0 — fixed in 8.7.0

How to fix

Upgrade to a fixed version: grokability snipe-it 8.7.0. Check the vendor advisory for mitigations.

References

• https://github.com/grokability/snipe-it/security/advisories/GHSA-wqfr-w9hp-c7v6
• https://www.vulncheck.com/advisories/snipe-it-before-8.7.0-ssrf-port-scanning-via-webhook-testing-endpoint
• https://github.com/grokability/snipe-it/security/advisories/GHSA-wqfr-w9hp-c7v6

Get alerted when CVE-2026-114064 or the next vulnerability affects your stack