CVE-2025-47226

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-425CWE-639

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-472277.5In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandleCVE-2025-472286.7In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows aCVE-2025-472295.5libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and applicatioCVE-2025-47239.8A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknoCVE-2025-47249.8A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue isCVE-2025-472414.0In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authorityCVE-2025-472447.3Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer, as demonstrated by cCVE-2025-472458.1In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.CVE-2025-47259.8A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part oCVE-2025-472565.6Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module inCVE-2025-47269.8A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknowCVE-2025-472686.5ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply pa
CVE-2025-47226: Low severity, CVSS 3.3 | Vulnix