{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "grokability snipe-it: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/grokability--snipe-it/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/grokability--snipe-it/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116201/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116201/",
   "title": "CVE-2026-116201 disclosed",
   "content_text": "Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple authenticated victim sessions that evade IdP-driven revocation.",
   "date_published": "2026-10-25T13:20:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-116199/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-116199/",
   "title": "CVE-2026-116199 disclosed",
   "content_text": "Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with email-shaped usernames and still-live Google identities can sign in via Google SSO and regain sessions at their original permission level, including admin.",
   "date_published": "2026-10-25T13:20:31Z"
  }
 ]
}