CVE-2026-114064
5.5 MEDIUMpublic exploit availablePublished 2026-10-21 · Updated 2026-10-22
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx responses from Test Webhooks to map open ports and active hosts.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L
Weaknesses
CWE-203
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2025-13591
- HIGHCVE-2026-103272PoC
- MEDIUMCVE-2026-103275PoC
- LOWCVE-2026-104415PoC
- HIGHCVE-2026-104416PoC
- LOWCVE-2026-105652PoC
- HIGHCVE-2026-105675PoC
- LOWCVE-2026-106180
Related by shared AI tags and CWE weakness class. Browse the full archive.