Skip to content
Threat Feed
Subscribe

Product

Standalone Report Designer

1 brief RSS
critical advisory

CVE-2026-65689: Bold Reports Standalone Report Designer Path Traversal Vulnerability

A missing filepath validation vulnerability (CVE-2026-65689) in Bold Reports Standalone Report Designer before version 14.1.12 allows unauthenticated attackers to perform path traversal by sending a crafted request to the database download feature, enabling them to read arbitrary sensitive server files, including authentication credentials, and potentially gain full unauthorized access to the application.

Standalone Report Designer path-traversal vulnerability web-application arbitrary-file-read cve
1r 1t 1c