Syslifters Sysreptor vulnerabilities

• syslifters sysreptor SysReptor: Session Fixation in Password-Protected Shared Notes CVE-2026-81181 3.7 LowSeptember 18, 2026
• syslifters sysreptor SysReptor: Unauthorized file disclosure by broken access control in writable shared notes CVE-2026-81182 4.2 MediumSeptember 18, 2026
• syslifters sysreptor SysReptor: Authenticated RCE by insecure image processing CVE-2026-81180 8.8 HighSeptember 18, 2026
• syslifters sysreptor SysReptor: Host header injection might allow account takeover CVE-2026-81179 8.1 HighSeptember 18, 2026
• syslifters sysreptor SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity CVE-2026-81178 3.5 LowSeptember 18, 2026
• syslifters sysreptor SysReptor: Privilege Escalation from User Admin to Superuser CVE-2026-44987 3.8 LowMay 8, 2026
• syslifters sysreptor SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional CVE-2026-42291 6.8 MediumMay 8, 2026
• syslifters sysreptor SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) CVE-2025-66561 7.3 HighDecember 4, 2025
• syslifters sysreptor SysReptor Susceptible to Privilege Escalation by Authenticated Users CVE-2025-59945 8.1 HighSeptember 27, 2025
• syslifters sysreptor Syslifters SysReptor before 2024.40 has a CSRF vulnerability for WebSocket connections. CVE-2024-36076 8.8 HighMay 19, 2024