https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:59:28 +0000 https://cve.radiocsirt.org/vuln/cve-2026-44987 <p><strong>Affected:</strong> Syslifters sysreptor</p> <p>SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with &#34;User Admin&#34; permissions can change the email addresses of users with &#34;Superuser&#34; permissions. If the SysReptor installation has the &#34;Forgot Password&#34; functionality enabled (non-default), they can reset the Superusers&#39; passwords and authenticate, if the Superuser has no MFA enabled. User managers can then access the Django backend (/admin) or manipulate the settings of the SysReptor installation. Note that user managers have the ability to access all pentest projects by assigning themselves &#34;Project Admin&#34; permissions. This is intentional and by design. This issue has been patched in version 2026.29.</p> <p><strong>Affected:</strong> Syslifters sysreptor</p> <p>SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with &#34;User Admin&#34; permissions can change the email addresses of users with &#34;Superuser&#34; permissions. If the SysReptor installation has the &#34;Forgot Password&#34; functionality enabled (non-default), they can reset the Superusers&#39; passwords and authenticate, if the Superuser has no MFA enabled. User managers can then access the Django backend (/admin) or manipulate the settings of the SysReptor installation. Note that user managers have the ability to access all pentest projects by assigning themselves &#34;Project Admin&#34; permissions. This is intentional and by design. This issue has been patched in version 2026.29.</p> https://cve.radiocsirt.org/vuln/cve-2026-44987