CVE-2017-1000192: Cygnux Syspass

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.

Affected products

• Cygnux Syspass: up to and including 2.1.7

Published 2017-11-17. Last modified 2026-06-17.