Syslifters Sysreptor
10 CVEs affecting Syslifters Sysreptor. Latest disclosed: 2026-09-18. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-81180 | High | 8.8 | 2026-09-18 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose form… |
CVE-2024-36076 | High | 8.8 | 2024-05-19 | Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information wh… |
CVE-2026-81179 | High | 8.1 | 2026-09-18 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWED_HOS… |
CVE-2025-59945 | High | 8.1 | 2025-09-27 | SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged (non-admin) users can… |
CVE-2025-66561 | High | 7.3 | 2025-12-04 | SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticate… |
CVE-2026-42291 | Medium | 6.8 | 2026-05-08 | SysReptor is a fully customizable pentest reporting platform. From version 2026.4 to before version 2026.27, the endpoints for reading and creating sharing lin… |
CVE-2026-81182 | Medium | 4.2 | 2026-09-18 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a public read-write note share link can d… |
CVE-2026-44987 | Low | 3.8 | 2026-05-08 | SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of u… |
CVE-2026-81181 | Low | 3.7 | 2026-09-18 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for protected shared notes does not rotate the… |
CVE-2026-81178 | Low | 3.5 | 2026-09-18 | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated holder of a public note share link receives project-wide col… |