snapotter-hq

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

snapotter-hq records in CISA KEV

No snapotter-hq vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-71292 CVE-2026-109562 · GHSA-j3v8-3vrc-7ghh

Missing authorization in SnapOtter upload and preview API

LOW 23

SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/preview/generate handlers without permission…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00219 Published 2026-10-12 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0