SSyslifters

Products

Exploited and recent CVEs

• CVE-2026-81181 Low 3.7 SysReptor: Session Fixation in Password-Protected Shared Notes 0.3%
• CVE-2026-81182 Medium 4.2 SysReptor: Unauthorized file disclosure by broken access control in writable shared notes 0.3%
• CVE-2026-81180 High 8.8 SysReptor: Authenticated RCE by insecure image processing 0.7%
• CVE-2026-81179 High 8.1 SysReptor: Host header injection might allow account takeover 0.5%
• CVE-2026-81178 Low 3.5 SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity 0.3%
• CVE-2026-44987 Low 3.8 SysReptor: Privilege Escalation from User Admin to Superuser 0.2%
• CVE-2026-42291 Medium 6.8 SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional 0.2%
• CVE-2025-66561 High 7.3 SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) 0.2%
• CVE-2025-59945 High 8.1 SysReptor Susceptible to Privilege Escalation by Authenticated Users 0.3%