Skip to content
OpenAdvisories

Vendor

Syslifters

9 known vulnerabilities.

Products

sysreptor 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-81181

    SysReptor: Session Fixation in Password-Protected Shared Notes

    SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for protected shared notes does not rotate the session identifier after successful authentication, allowing session fixation. An attacker who can …

    Syslifters sysreptor
  • Low 3.5
    CVE-2026-81178

    SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity

    SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated holder of a public note share link receives project-wide collaborative editing metadata because the public share consumer joins the same collaboration group as …

    Syslifters sysreptor
  • Low 3.8
    CVE-2026-44987

    SysReptor: Privilege Escalation from User Admin to Superuser

    SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functiona…

    Syslifters sysreptor