Syslifters

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Syslifters records in CISA KEV

No Syslifters vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sysreptor 3 records HIGH

Records

10 records

TI-2025-37333 CVE-2025-59945

SysReptor Susceptible to Privilege Escalation by Authenticated Users

HIGH 68

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00336 Published 2025-09-27 Fixed in 2025.83 CWE-266

TI-2026-56078 CVE-2026-81180

SysReptor: Authenticated RCE by insecure image processing

MEDIUM 41

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00663 Published 2026-09-18 Fixed in 2026.61 CWE-20

TI-2024-23926 CVE-2024-36076 · GHSA-rw3m-9ff4-qmp2

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30…

MEDIUM 40

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site su…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00247 Published 2024-05-19 No fix listed CWE-352

TI-2026-56077 CVE-2026-81179

SysReptor: Host header injection might allow account takeover

LOW 38

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00479 Published 2026-09-18 Fixed in 2026.58 CWE-807

TI-2025-40972 CVE-2025-66561

SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)

LOW 33

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00201 Published 2025-12-04 Fixed in 2025.102 CWE-79

TI-2026-30602 CVE-2026-42291

SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional

LOW 31

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00188 Published 2026-05-08 Fixed in 2026.27 CWE-639

TI-2026-56080 CVE-2026-81182

SysReptor: Unauthorized file disclosure by broken access control in writable shared notes

LOW 19

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00273 Published 2026-09-18 Fixed in 2026.68 CWE-639

TI-2026-56079 CVE-2026-81181

SysReptor: Session Fixation in Password-Protected Shared Notes

LOW 17

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1LOW 3.7 Network Low privileges User interaction EPSS 0.00279 Published 2026-09-18 Fixed in 2026.68 CWE-384

TI-2026-56076 CVE-2026-81178

SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity

LOW 17

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00298 Published 2026-09-18 Fixed in 2026.55 CWE-863

TI-2026-32846 CVE-2026-44987

SysReptor: Privilege Escalation from User Admin to Superuser

LOW 17

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00162 Published 2026-05-08 Fixed in 2026.29 CWE-269

Open these records in search →

Critical	0
High	5
Medium	2
Low	3
No CVSS	0