A vulnerability identified as critical has been detected in Grokability snipe-it up to 8.4.0. Affected by this issue is some unknown functionality of the file app/Http/Controllers/Api/UploadedFilesController.php. Performing a manipulation results in unrestricted upload.
This vulnerability was named CVE-2026-37709. The attack may be initiated remotely. There is no available exploit.
You should upgrade the affected component.
