Syslifters SysReptor up to 2026.57 Host Header privileges management

Summaryinfo

A vulnerability, which was classified as critical, has been found in Syslifters SysReptor up to 2026.57. This affects an unknown part of the component Host Header. This manipulation of the argument Host causes privileges management. This vulnerability is registered as CVE-2026-81179. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Syslifters SysReptor up to 2026.57 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Host Header. The manipulation of the argument Host with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWED_HOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request a reset email whose link points to an attacker-controlled system, and a victim who follows that link can disclose the reset token, allowing the attacker to reset the victim's password and take over the account. Exploitation also requires a configured email gateway and an email address for the victim, while some reverse proxy configurations may reject the hostile Host header. This issue is fixed in version 2026.58.

It is possible to read the advisory at github.com. This vulnerability is known as CVE-2026-81179 since 08/26/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Upgrading to version 2026.58 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Syslifters

Name

• SysReptor

Version

• 2026.0
• 2026.1
• 2026.2
• 2026.3
• 2026.4
• 2026.5
• 2026.6
• 2026.7
• 2026.8
• 2026.9
• 2026.10
• 2026.11
• 2026.12
• 2026.13
• 2026.14
• 2026.15
• 2026.16
• 2026.17
• 2026.18
• 2026.19
• 2026.20
• 2026.21
• 2026.22
• 2026.23
• 2026.24
• 2026.25
• 2026.26
• 2026.27
• 2026.28
• 2026.29
• 2026.30
• 2026.31
• 2026.32
• 2026.33
• 2026.34
• 2026.35
• 2026.36
• 2026.37
• 2026.38
• 2026.39
• 2026.40
• 2026.41
• 2026.42
• 2026.43
• 2026.44
• 2026.45
• 2026.46
• 2026.47
• 2026.48
• 2026.49
• 2026.50
• 2026.51
• 2026.52
• 2026.53
• 2026.54
• 2026.55
• 2026.56
• 2026.57

Website

• Product: https://github.com/Syslifters/sysreptor/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion