Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-49870
Not yet scoredAwaiting CVSS assessment
Published
June 23, 2026
Affected
1 project
Assigned by
OSV
Description
Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`
snipe/snipe-it
Docker HubThe *only* official docker hub repository for Snipe-IT from the maintainers of Snipe-IT.
Docker HubThe *only* official docker hub repository for Snipe-IT from the maintainers of Snipe-IT.< 8.6.0NVD