Skip to content

CVE-2026-86738

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 9, 2026
Last Seen
September 9, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CVEs Discovered in Snipe-IT Affecting User Authentication and CSS Injection64.5

Two critical vulnerabilities have been identified in Snipe-IT prior to version 8.7.0. CVE-2026-86770 allows attackers to exploit case sensitivity issues during SAML authentication, potentially leading to account takeovers. CVE-2026-86738 involves CSS injection due to improper sanitization, enabling...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-200 - Exposure of Sensitive InformationT1567.002 - Exfiltration to Cloud StorageSnipe-ITXSS