CVE-2026-44987

LOW 3.8

SysReptor: Privilege Escalation from User Admin to Superuser

CVSS Score

3.8

EPSS Score

0.0%

EPSS Percentile

0th

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled (non-default), they can reset the Superusers' passwords and authenticate, if the Superuser has no MFA enabled. User managers can then access the Django backend (/admin) or manipulate the settings of the SysReptor installation. Note that user managers have the ability to access all pentest projects by assigning themselves "Project Admin" permissions. This is intentional and by design. This issue has been patched in version 2026.29.

CWE	CWE-269
Vendor	syslifters
Product	sysreptor
Published	May 8, 2026

Stay Ahead of the Next One

Get instant alerts for syslifters sysreptor

Be the first to know when new low vulnerabilities affecting syslifters sysreptor are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

Syslifters / sysreptor

< 2026.29

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Syslifters/sysreptor/security/advisories/GHSA-6x8f-v3cf-cvr3 github.com: https://github.com/Syslifters/sysreptor/releases/tag/2026.29