CVE-2026-86762

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 10, 2026

Last Seen

September 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Snipe-IT API Access Vulnerability Exposes Deactivated User Tokens65.3

A critical vulnerability in Snipe-IT, identified as CVE-2026-86762, allows deactivated users to retain their REST API access tokens, granting them read and write permissions even after account deactivation. This flaw arises because the CheckUserIsActivated middleware is not applied to the API middle...