[MEDIUM] Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter

PKSA-3ybt-zv27-1tk1 CVE-2026-55476 GHSA-53jc-27pc-x8r8

Affected package: snipe/snipe-it

Affected version: <8.6.0

Reported by:
GitHub