Vulnerabilities

TI-2026-56079 CVE-2026-81181

SysReptor: Session Fixation in Password-Protected Shared Notes

LOW 17

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1LOW 3.7 Network Low privileges User interaction EPSS 0.00279 Published 2026-09-18 Fixed in 2026.68 CWE-384

TI-2026-56080 CVE-2026-81182

SysReptor: Unauthorized file disclosure by broken access control in writable shared notes

LOW 19

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00273 Published 2026-09-18 Fixed in 2026.68 CWE-639

TI-2026-56078 CVE-2026-81180

SysReptor: Authenticated RCE by insecure image processing

MEDIUM 41

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00663 Published 2026-09-18 Fixed in 2026.61 CWE-20

TI-2026-56077 CVE-2026-81179

SysReptor: Host header injection might allow account takeover

LOW 38

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00479 Published 2026-09-18 Fixed in 2026.58 CWE-807

TI-2026-56076 CVE-2026-81178

SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity

LOW 17

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00298 Published 2026-09-18 Fixed in 2026.55 CWE-863

TI-2026-32846 CVE-2026-44987

SysReptor: Privilege Escalation from User Admin to Superuser

LOW 17

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00162 Published 2026-05-08 Fixed in 2026.29 CWE-269

TI-2026-30602 CVE-2026-42291

SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional

LOW 31

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00188 Published 2026-05-08 Fixed in 2026.27 CWE-639

TI-2025-40972 CVE-2025-66561

SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)

LOW 33

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00201 Published 2025-12-04 Fixed in 2025.102 CWE-79

TI-2025-37333 CVE-2025-59945

SysReptor Susceptible to Privilege Escalation by Authenticated Users

HIGH 68

SysReptor is a fully customizable pentest reporting platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00336 Published 2025-09-27 Fixed in 2025.83 CWE-266

TI-2024-23926 CVE-2024-36076 · GHSA-rw3m-9ff4-qmp2

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30…

MEDIUM 40

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site su…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00247 Published 2024-05-19 No fix listed CWE-352

Vulnerabilities

Filters