CVE-2026-81182mediumCWE-639

CVE-2026-81182: falha de média gravidade em Syslifters sysreptor

SysReptor: Unauthorized file disclosure by broken access control in writable shared notes

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar sysreptor

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.2epss 0.3%
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a public read-write note share link can disclose an uploaded file or image from the same project by updating the shared note to reference the target asset filename. The user-controlled reference causes the shared-note authorization logic to treat the asset as permitted, after which the attacker can download it. The attacker must know the asset filename, and the issue does not permit cross-project access. This issue is fixed in version 2026.68.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Syslifters · sysreptor
CVEs relacionadas — Syslifters sysreptor

No mesmo produto, das mais perigosas para as menos.

CVE-2026-81180HIGHSysReptor: Authenticated RCE by insecure image processingEPSS 0.7%CVE-2026-81179HIGHSysReptor: Host header injection might allow account takeoverEPSS 0.5%CVE-2025-59945HIGHSysReptor Susceptible to Privilege Escalation by Authenticated UsersEPSS 0.3%CVE-2026-81178LOWSysReptor: Anonymous note-share link discloses project member identities and non-shared note activityEPSS 0.3%CVE-2026-81181LOWSysReptor: Session Fixation in Password-Protected Shared NotesEPSS 0.3%CVE-2025-66561HIGHSysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.2%