Vulnerabilities in Syslifters
9 resultsVexday analysis
Syslifters apresenta uma base reduzida de 4 CVEs sem exploração ativa conhecida, mas com 2 vulnerabilidades publicadas nos últimos 90 dias que demandam atenção. A fraqueza dominante (CWE-266 - Privilégios Incorretos) aponta para falhas de controle de acesso, que embora sem exploração ativa documentada, representam risco latente em ambientes críticos.
CVE-2026-81180HIGHSysReptor: Authenticated RCE by insecure image processingEPSS 0.4%CVE-2025-59945HIGHSysReptor Susceptible to Privilege Escalation by Authenticated UsersEPSS 0.3%CVE-2026-81179HIGHSysReptor: Host header injection might allow account takeoverEPSS 0.3%CVE-2026-81181LOWSysReptor: Session Fixation in Password-Protected Shared NotesEPSS 0.2%CVE-2026-81178LOWSysReptor: Anonymous note-share link discloses project member identities and non-shared note activityEPSS 0.2%CVE-2025-66561HIGHSysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.2%CVE-2026-42291MEDIUMSysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor ProfessionalEPSS 0.2%CVE-2026-81182MEDIUMSysReptor: Unauthorized file disclosure by broken access control in writable shared notesEPSS 0.2%CVE-2026-44987LOWSysReptor: Privilege Escalation from User Admin to SuperuserEPSS 0.2%