Syslifters vulnerabilities
9 published CVEs name Syslifters among the affected products.
- 9Published CVEs9 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-81181
SysReptor: Session Fixation in Password-Protected Shared Notes
Syslifters · sysreptor
Low3.7 - CVE-2026-81182
SysReptor: Unauthorized file disclosure by broken access control in writable shared notes
Syslifters · sysreptor
Medium4.2 - CVE-2026-81180
SysReptor: Authenticated RCE by insecure image processing
Syslifters · sysreptor
High8.8 - CVE-2026-81179
SysReptor: Host header injection might allow account takeover
Syslifters · sysreptor
High8.1 - CVE-2026-81178
SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity
Syslifters · sysreptor
Low3.5 - CVE-2026-44987
SysReptor: Privilege Escalation from User Admin to Superuser
Syslifters · sysreptor
Low3.8 - CVE-2026-42291
SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional
Syslifters · sysreptor
Medium6.8 - CVE-2025-66561
SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)
Syslifters · sysreptor
High7.3 - CVE-2025-59945
SysReptor Susceptible to Privilege Escalation by Authenticated Users
Syslifters · sysreptor
High8.1