Login Request a demo
SY
Product
sysreptor
by Syslifters · last CVE Sep 18, 2026
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 4Medium 3Low 3
Severity
All severities10Critical0High4Medium3Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add sysreptor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81180
8.8
1%
Sep 18
SysReptor: Authenticated RCE by insecure image processing
Affected: < 2026.61
CVE-2024-36076
8.8
0%
May 19
Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in…
Affected: 2024.28 before 2024.40
CVE-2026-81179
8.1
0%
Sep 18
SysReptor: Host header injection might allow account takeover
Affected: < 2026.58
CVE-2025-59945
8.1
0%
Sep 27
SysReptor Susceptible to Privilege Escalation by Authenticated Users
Affected: >= 2024.74, < 2025.83
CVE-2026-42291
6.8
0%
May 8
SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional
Affected: >= 2026.4, < 2026.27
CVE-2025-66561
5.4
0%
Dec 4
SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)
Affected: < 2025.102
CVE-2026-81182
4.2
0%
Sep 18
SysReptor: Unauthorized file disclosure by broken access control in writable shared notes
Affected: < 2026.68
CVE-2026-44987
3.8
0%
May 8
SysReptor: Privilege Escalation from User Admin to Superuser
Affected: < 2026.29
CVE-2026-81181
3.7
0%
Sep 18
SysReptor: Session Fixation in Password-Protected Shared Notes
Affected: < 2026.68
CVE-2026-81178
3.5
0%
Sep 18
SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity
Affected: < 2026.55
Showing 10