CVE-2026-86750

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 10, 2026

Last Seen

September 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Risk Authorization Flaw in Snipe-IT Affects Multi-Tenant Deployments63.0

A critical vulnerability, CVE-2026-86750, has been identified in Snipe-IT versions up to 8.6.3, allowing non-superusers to create or edit user accounts with unauthorized company identifiers via the REST API. This flaw occurs due to a failure to validate company assignment before saving user records,...