{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/products/standalone-report-designer-before-14.1.12/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-65690"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Standalone Report Designer (before 14.1.12)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","path-traversal","rce","web-application"],"_cs_type":"advisory","_cs_vendors":["Bold Reports"],"content_html":"\u003cp\u003eCVE-2026-65690 identifies a critical missing filepath validation vulnerability in Bold Reports Standalone Report Designer versions prior to 14.1.12. This flaw resides within the product's file upload functionality, enabling authenticated attackers to exploit a path traversal weakness. By supplying a specially crafted filename that includes directory traversal sequences (e.g., \u003ccode\u003e../\u003c/code\u003e), attackers can bypass security controls and upload malicious files to arbitrary locations outside the intended upload directory. Successful exploitation can lead to arbitrary command execution with high privileges on the server, potentially compromising the integrity, confidentiality, and availability of the affected system. This vulnerability allows for a complete system takeover by an authenticated user.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn attacker obtains valid authentication credentials for the Bold Reports Standalone Report Designer application.\u003c/li\u003e\n\u003cli\u003eThe authenticated attacker accesses the application's file upload functionality.\u003c/li\u003e\n\u003cli\u003eThe attacker crafts a malicious filename containing path traversal sequences (e.g., \u003ccode\u003e../../../../webshell.jsp\u003c/code\u003e) and attempts to upload it.\u003c/li\u003e\n\u003cli\u003eDue to the missing filepath validation (CVE-2026-65690), the application fails to properly sanitize the filename.\u003c/li\u003e\n\u003cli\u003eThe malicious file (e.g., a web shell or script) is written to an arbitrary location on the server, outside the intended upload directory.\u003c/li\u003e\n\u003cli\u003eThe attacker then accesses the uploaded malicious file (e.g., the web shell) through a web request.\u003c/li\u003e\n\u003cli\u003eThe web shell executes arbitrary commands with the privileges of the application, potentially leading to high-privileged system access or further compromise.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-65690 grants authenticated attackers the ability to execute arbitrary commands with high privileges on the compromised server. This can lead to a complete system takeover, allowing for sensitive data exfiltration, modification, or deletion, installation of additional malware such as ransomware or backdoors, and lateral movement within the network. The integrity and confidentiality of data stored on or accessible from the server are at severe risk. The broad impact of arbitrary command execution underscores the criticality of patching this vulnerability immediately.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch Bold Reports Standalone Report Designer to version 14.1.12 or higher immediately to address CVE-2026-65690.\u003c/li\u003e\n\u003cli\u003eDeploy the provided Sigma rule to your SIEM to detect attempts at path traversal through web server logs.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for suspicious file upload activity and unusual file paths, particularly those referenced in the Sigma rule.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-23T14:22:26Z","date_published":"2026-07-23T14:22:26Z","id":"https://feed.craftedsignal.io/briefs/2026-07-bold-reports-path-traversal-rce/","summary":"A missing filepath validation vulnerability (CVE-2026-65690) in Bold Reports Standalone Report Designer before version 14.1.12 allows authenticated attackers to perform path traversal via crafted filenames during file upload, leading to arbitrary command execution with high privileges.","title":"Bold Reports Standalone Report Designer Path Traversal to RCE Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-07-bold-reports-path-traversal-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Standalone Report Designer (Before 14.1.12)","version":"https://jsonfeed.org/version/1.1"}