Vulnerabilities in Syslifters
9 resultsCVE-2026-81180HIGHSysReptor: Authenticated RCE by insecure image processingEPSS 0.7%CVE-2026-81179HIGHSysReptor: Host header injection might allow account takeoverEPSS 0.5%CVE-2025-59945HIGHSysReptor Susceptible to Privilege Escalation by Authenticated UsersEPSS 0.3%CVE-2026-81178LOWSysReptor: Anonymous note-share link discloses project member identities and non-shared note activityEPSS 0.3%CVE-2026-81181LOWSysReptor: Session Fixation in Password-Protected Shared NotesEPSS 0.3%CVE-2026-81182MEDIUMSysReptor: Unauthorized file disclosure by broken access control in writable shared notesEPSS 0.3%CVE-2025-66561HIGHSysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.2%CVE-2026-42291MEDIUMSysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor ProfessionalEPSS 0.2%CVE-2026-44987LOWSysReptor: Privilege Escalation from User Admin to SuperuserEPSS 0.2%