CVE-2026-86770

HIGH 8.1

Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation

CVSS Score

8.1

EPSS Score

0.0%

EPSS Percentile

0th

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4_unicode_ci database collation to bypass username matching and achieve account takeover through federated login paths including SAML, LDAP, and OAuth.

CWE	CWE-178
Vendor	grokability
Product	snipe-it
Published	Sep 9, 2026
Last Updated	Sep 14, 2026

Stay Ahead of the Next One

Get instant alerts for grokability snipe-it

Be the first to know when new high vulnerabilities affecting grokability snipe-it are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

grokability / snipe-it

8.6.3 < 8.7.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/grokability/snipe-it/security/advisories/GHSA-w3vv-5wxh-xg4h vulncheck.com: https://www.vulncheck.com/advisories/snipe-it-before-8.7.0-authentication-bypass-via-saml-username-collation

Credits

William957-web