« Volver al listado

CVE-2026-44987

Estado: AplazadaBaja (3.8)—

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled (non-default), they can reset the Superusers' passwords and authenticate, if the Superuser has no MFA enabled. User managers can then access the Django backend (/admin) or manipulate the settings of the SysReptor installation. Note that user managers have the ability to access all pentest projects by assigning themselves "Project Admin" permissions. This is intentional and by design. This issue has been patched in version 2026.29.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Syslifters — SysreptorAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-44987",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-44987",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-12T13:00:12.318338Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.8,
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "Syslifters",
          "product": "sysreptor",
          "versions": [
            {
              "status": "affected",
              "version": "< 2026.29"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-05-08T23:16:39.917",
  "references": [
    {
      "url": "https://github.com/Syslifters/sysreptor/releases/tag/2026.29",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Syslifters/sysreptor/security/advisories/GHSA-6x8f-v3cf-cvr3",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with \"User Admin\" permissions can change the email addresses of users with \"Superuser\" permissions. If the SysReptor installation has the \"Forgot Password\" functionality enabled (non-default), they can reset the Superusers' passwords and authenticate, if the Superuser has no MFA enabled. User managers can then access the Django backend (/admin) or manipulate the settings of the SysReptor installation. Note that user managers have the ability to access all pentest projects by assigning themselves \"Project Admin\" permissions. This is intentional and by design. This issue has been patched in version 2026.29."
    },
    {
      "lang": "es",
      "value": "SysReptor es una plataforma de informes de pentesting totalmente personalizable. Antes de la versión 2026.29, los usuarios con permisos de 'Administrador de Usuarios' pueden cambiar las direcciones de correo electrónico de los usuarios con permisos de 'Superusuario'. Si la instalación de SysReptor tiene la funcionalidad de 'Olvidé mi Contraseña' habilitada (no predeterminada), pueden restablecer las contraseñas de los Superusuarios y autenticarse, si el Superusuario no tiene MFA habilitado. Los administradores de usuarios pueden entonces acceder al backend de Django (/admin) o manipular la configuración de la instalación de SysReptor. Tenga en cuenta que los administradores de usuarios tienen la capacidad de acceder a todos los proyectos de pentesting asignándose a sí mismos permisos de 'Administrador de Proyecto'. Esto es intencional y por diseño. Este problema ha sido parcheado en la versión 2026.29."
    }
  ],
  "lastModified": "2026-07-24T20:10:00.147",
  "sourceIdentifier": "security-advisories@github.com"
}