What is GHSA-m3v2-6c3r-vqh9?

GHSA-m3v2-6c3r-vqh9 is a security advisory published by GitHub Security Advisories with Medium severity. snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the...

Which CVE IDs does GHSA-m3v2-6c3r-vqh9 cover?

GHSA-m3v2-6c3r-vqh9 covers the following CVE IDs: CVE-2026-86735. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m3v2-6c3r-vqh9?

GHSA-m3v2-6c3r-vqh9 has a CVSS v3 base score of 5.0, published by GitHub Security Advisories.

GHSA-m3v2-6c3r-vqh9MediumCVSS 5.0

snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the...

Vendor

GitHub Security Advisories

Published

September 8, 2026

Last Modified

September 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-86735 →

📋 Description

snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo transition addresses to bypass SSRF guards and access internal services or cloud metadata endpoints.

🔗 References (4)

https://github.com/grokability/snipe-it/security/advisories/GHSA-5j6m-rr83-rpj7
https://nvd.nist.gov/vuln/detail/CVE-2026-86735
https://www.vulncheck.com/advisories/snipe-it-before-8.7.0-ssrf-via-ipv6-transition-address-bypass
https://github.com/advisories/GHSA-m3v2-6c3r-vqh9