rootpwn

medium · CVSS v3 4.2

CVE-2026-81182

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a …

Description

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a public read-write note share link can disclose an uploaded file or image from the same project by updating the shared note to reference the target asset filename. The user-controlled reference causes the shared-note authorization logic to treat the asset as permitted, after which the attacker can download it. The attacker must know the asset filename, and the issue does not permit cross-project access. This issue is fixed in version 2026.68.

Scores

Severity
medium
CVSS v2
3.6
CVSS v3
4.2
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

medium

CVE-2026-93312

A null pointer dereference in Poppler 26.07.0’s JBIG2Stream::rewind can be triggered remotely, causing a crash in PDF rendering. The flaw is limited to the Poppler library and does not directly expose data. Updating to 26.08.0 mitigates the issue.

View analysis

medium

CVE-2026-77608

Semantic MediaWiki extension for MediaWiki had a reflected XSS vulnerability due to insufficient output encoding of the 'value' parameter. This flaw could allow attackers to inject malicious scripts into wiki pages or error messages. The issue is fixed in version 7.2.0.

View analysis

medium

CVE-2026-77609

Semantic MediaWiki extension allows open redirect via Special:URIResolver. Attackers can craft subpages that redirect to arbitrary external URLs, enabling phishing. The flaw exists in versions prior to 7.2.0.

View analysis

medium

CVE-2026-77610

Semantic MediaWiki extension allows storing data in wiki pages. Prior to version 7.2.0, debug output from queries can be reflected as raw HTML, enabling reflected XSS. This affects any MediaWiki site using the extension and allows attackers to inject scripts via anonymous requests.

View analysis