{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/products/standalone-report-designer/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-65689"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Standalone Report Designer"],"_cs_severities":["critical"],"_cs_tags":["path-traversal","vulnerability","web-application","arbitrary-file-read","cve"],"_cs_type":"advisory","_cs_vendors":["Bold Reports"],"content_html":"\u003cp\u003eCVE-2026-65689 details a critical path traversal vulnerability affecting Bold Reports Standalone Report Designer versions prior to 14.1.12. This flaw resides within the application's database download feature, which fails to properly validate filepaths provided in requests. Unauthenticated attackers can leverage this weakness by supplying a specially crafted HTTP request containing path traversal sequences to read arbitrary files directly from the server's filesystem. Successful exploitation allows for the disclosure of sensitive server files, including critical configuration data and authentication credentials, potentially leading to complete unauthorized access to the application and underlying system resources. This vulnerability carries a CVSS v3.1 base score of 9.8, indicating a severe risk to affected organizations.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn unauthenticated attacker identifies an internet-facing instance of Bold Reports Standalone Report Designer vulnerable to CVE-2026-65689.\u003c/li\u003e\n\u003cli\u003eThe attacker constructs a malicious HTTP request targeting the application's database download feature.\u003c/li\u003e\n\u003cli\u003eThis crafted request includes path traversal sequences, such as \u003ccode\u003e../\u003c/code\u003e or \u003ccode\u003e..%2f\u003c/code\u003e, embedded within the filename or path parameter intended for the download.\u003c/li\u003e\n\u003cli\u003eThe vulnerable application, due to missing filepath validation, processes the request and resolves the traversed path.\u003c/li\u003e\n\u003cli\u003eThe server attempts to read the file specified by the attacker from an arbitrary location on its filesystem.\u003c/li\u003e\n\u003cli\u003eIf the file exists and permissions allow, its content is returned to the attacker as part of the download response.\u003c/li\u003e\n\u003cli\u003eThe attacker analyzes the disclosed file for sensitive information, such as authentication credentials, configuration files, or other proprietary data.\u003c/li\u003e\n\u003cli\u003eUsing the exfiltrated credentials, the attacker can gain further unauthorized access to the Bold Reports application or other connected systems.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe successful exploitation of CVE-2026-65689 allows unauthenticated attackers to perform arbitrary file reads on the server hosting Bold Reports Standalone Report Designer. This can lead to the disclosure of highly sensitive information, including user credentials, configuration files, and proprietary application data. Such disclosures enable attackers to escalate privileges, gain full unauthorized access to the application, compromise underlying server infrastructure, and potentially exfiltrate critical business data. Given the unauthenticated nature and the ability to read credentials, the potential for a complete system compromise is high, affecting the confidentiality, integrity, and availability of the application and its data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately apply the patch by upgrading Bold Reports Standalone Report Designer to version 14.1.12 or later to address CVE-2026-65689.\u003c/li\u003e\n\u003cli\u003eDeploy the provided Sigma rule to your SIEM to detect attempts at path traversal exploitation against your web infrastructure.\u003c/li\u003e\n\u003cli\u003eEnsure web server logs (category \u003ccode\u003ewebserver\u003c/code\u003e) are configured to capture full URI stems and query parameters for detection of suspicious patterns.\u003c/li\u003e\n\u003cli\u003eImplement Web Application Firewall (WAF) rules to detect and block requests containing common path traversal sequences (\u003ccode\u003e../\u003c/code\u003e, \u003ccode\u003e%2e%2e%2f\u003c/code\u003e, etc.) targeting web applications.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-23T14:21:18Z","date_published":"2026-07-23T14:21:18Z","id":"https://feed.craftedsignal.io/briefs/2026-07-cve-2026-65689-bold-reports-designer/","summary":"A missing filepath validation vulnerability (CVE-2026-65689) in Bold Reports Standalone Report Designer before version 14.1.12 allows unauthenticated attackers to perform path traversal by sending a crafted request to the database download feature, enabling them to read arbitrary sensitive server files, including authentication credentials, and potentially gain full unauthorized access to the application.","title":"CVE-2026-65689: Bold Reports Standalone Report Designer Path Traversal Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-07-cve-2026-65689-bold-reports-designer/"}],"language":"en","title":"CraftedSignal Threat Feed - Standalone Report Designer","version":"https://jsonfeed.org/version/1.1"}