CVE-2026-86770

8.6 highEPSS 0.6%

High (8.6) in snipeitapp snipe-it. EPSS 0.6% chance of exploitation in the next 30 days.

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4_unicode_ci database collation to bypass username matching and achieve account takeover through federated login paths including SAML, LDAP, and OAuth.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-178
Published: 2026-09-09
Modified: 2026-09-16
Record from: the NVD, synced 2026-10-19

Affected

snipeitapp:snipe-it

References

https://github.com/grokability/snipe-it/security/advisories/GHSA-w3vv-5wxh-xg4h
https://www.vulncheck.com/advisories/snipe-it-before-8.7.0-authentication-bypass-via-saml-username-collation
https://github.com/grokability/snipe-it/security/advisories/GHSA-w3vv-5wxh-xg4h

Check your stack JSON