CVE-2026-38533 | Snipe-IT 8.4.0 PUT /api/v1/users/ improper authentication

A vulnerability was found in Snipe-IT 8.4.0. It has been rated as critical. This vulnerability affects unknown code of the file /api/v1/users/ of the component PUT Handler. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-38533. The attack can be initiated remotely. There is not any exploit available.