cvedb.io
CVE-2025-63601
CRITICAL · CVSS 9.9
EPSS exploitation probability: 0%
Published 2025-11-05T16:15:40.897 · Last modified 2026-06-17T09:53:16.677

Summary

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands.

Affected products

snipeitapp — snipe-it

Does this affect you?

Add your gear to cvedb and we'll alert you only when snipeitapp ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.