[MEDIUM] Snipe-IT has a 2FA reset privilege bypass

PKSA-xjxm-8vz6-vf8y CVE-2026-50550 GHSA-6x4j-8954-5hxm

Affected package: snipe/snipe-it

Affected version: <8.5.0

Reported by:
GitHub