sysreptor vulnerabilities and fixes

Recent CVEs affecting sysreptor, with upgrade or downgrade steps. 3 tracked.

sysreptor has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-12-04. Highest priority: CVE-2025-59945 (score 35/100).

• CVE-2025-66561 HIGH 7.3 UPGRADE SysReptor is a fully customizable pentest reporting platform
• CVE-2025-59945 HIGH 8.1 UPGRADE SysReptor is a fully customizable pentest reporting platform
• CVE-2024-36076 HIGH 8.8 UPGRADE Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escala

FAQ

How do I fix sysreptor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sysreptor being exploited right now?

None of the tracked sysreptor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sysreptor CVE should I patch first?

CVE-2025-59945 currently ranks highest (35/100): SysReptor is a fully customizable pentest reporting platform.

RSS feed for sysreptor · ← Back to latest CVEs