Product

Standalone Report Designer (Before 14.1.12)

1 brief RSS

Bold Reports Standalone Report Designer Path Traversal to RCE Vulnerability

A missing filepath validation vulnerability (CVE-2026-65690) in Bold Reports Standalone Report Designer before version 14.1.12 allows authenticated attackers to perform path traversal via crafted filenames during file upload, leading to arbitrary command execution with high privileges.

Standalone Report Designer vulnerability path-traversal rce web-application

1r 1t 1c 2i 1h ago