Read the docs
TI-2026-56076 Aliases CVE-2026-81178

SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity

Priority LOW 17CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-863.

Summary

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated holder of a public note share link receives project-wide collaborative editing metadata because the public share consumer joins the same collaboration group as authenticated project members and forwards client information, connection, awareness, and deletion events without consistently restricting them to the shared note subtree. The disclosed metadata can identify project members through usernames and names and reveal the identifiers and live editing activity of notes that were not shared. The content of non-shared notes remains protected, and the issue does not grant write access. This issue is fixed in version 2026.55.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00298 22nd percentileScored 2026-11-07
Fix Fixed sysreptor (Syslifters): 2026.55

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Syslifterssysreptorbefore 2026.552026.55Patch availableCNA
  • sysreptor VendorSyslifters Affected before 2026.55 Fixed in 2026.55 Patch available CNA

Remediation

  • Fix · CNA sysreptor (Syslifters) Fixed in 2026.55

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-81178

References

Other 3

  • TI-2025-37333 SysReptor Susceptible to Privilege Escalation by Authenticated Users CVSS 3.1HIGH 8.1
  • TI-2026-56078 SysReptor: Authenticated RCE by insecure image processing CVSS 3.1HIGH 8.8
  • TI-2024-23926 Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30… CVSS 3.1HIGH 8.8
  • TI-2026-56077 SysReptor: Host header injection might allow account takeover CVSS 3.1HIGH 8.1
  • TI-2025-40972 SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) CVSS 3.1HIGH 7.3
  • TI-2026-30602 SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional CVSS 3.1MEDIUM 6.8
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences