{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/vendors/bold-reports/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-65690"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Standalone Report Designer (before 14.1.12)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","path-traversal","rce","web-application"],"_cs_type":"advisory","_cs_vendors":["Bold Reports"],"content_html":"\u003cp\u003eCVE-2026-65690 identifies a critical missing filepath validation vulnerability in Bold Reports Standalone Report Designer versions prior to 14.1.12. This flaw resides within the product's file upload functionality, enabling authenticated attackers to exploit a path traversal weakness. By supplying a specially crafted filename that includes directory traversal sequences (e.g., \u003ccode\u003e../\u003c/code\u003e), attackers can bypass security controls and upload malicious files to arbitrary locations outside the intended upload directory. Successful exploitation can lead to arbitrary command execution with high privileges on the server, potentially compromising the integrity, confidentiality, and availability of the affected system. This vulnerability allows for a complete system takeover by an authenticated user.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn attacker obtains valid authentication credentials for the Bold Reports Standalone Report Designer application.\u003c/li\u003e\n\u003cli\u003eThe authenticated attacker accesses the application's file upload functionality.\u003c/li\u003e\n\u003cli\u003eThe attacker crafts a malicious filename containing path traversal sequences (e.g., \u003ccode\u003e../../../../webshell.jsp\u003c/code\u003e) and attempts to upload it.\u003c/li\u003e\n\u003cli\u003eDue to the missing filepath validation (CVE-2026-65690), the application fails to properly sanitize the filename.\u003c/li\u003e\n\u003cli\u003eThe malicious file (e.g., a web shell or script) is written to an arbitrary location on the server, outside the intended upload directory.\u003c/li\u003e\n\u003cli\u003eThe attacker then accesses the uploaded malicious file (e.g., the web shell) through a web request.\u003c/li\u003e\n\u003cli\u003eThe web shell executes arbitrary commands with the privileges of the application, potentially leading to high-privileged system access or further compromise.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-65690 grants authenticated attackers the ability to execute arbitrary commands with high privileges on the compromised server. This can lead to a complete system takeover, allowing for sensitive data exfiltration, modification, or deletion, installation of additional malware such as ransomware or backdoors, and lateral movement within the network. The integrity and confidentiality of data stored on or accessible from the server are at severe risk. The broad impact of arbitrary command execution underscores the criticality of patching this vulnerability immediately.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch Bold Reports Standalone Report Designer to version 14.1.12 or higher immediately to address CVE-2026-65690.\u003c/li\u003e\n\u003cli\u003eDeploy the provided Sigma rule to your SIEM to detect attempts at path traversal through web server logs.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for suspicious file upload activity and unusual file paths, particularly those referenced in the Sigma rule.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-23T14:22:26Z","date_published":"2026-07-23T14:22:26Z","id":"https://feed.craftedsignal.io/briefs/2026-07-bold-reports-path-traversal-rce/","summary":"A missing filepath validation vulnerability (CVE-2026-65690) in Bold Reports Standalone Report Designer before version 14.1.12 allows authenticated attackers to perform path traversal via crafted filenames during file upload, leading to arbitrary command execution with high privileges.","title":"Bold Reports Standalone Report Designer Path Traversal to RCE Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-07-bold-reports-path-traversal-rce/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-65689"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Standalone Report Designer"],"_cs_severities":["critical"],"_cs_tags":["path-traversal","vulnerability","web-application","arbitrary-file-read","cve"],"_cs_type":"advisory","_cs_vendors":["Bold Reports"],"content_html":"\u003cp\u003eCVE-2026-65689 details a critical path traversal vulnerability affecting Bold Reports Standalone Report Designer versions prior to 14.1.12. This flaw resides within the application's database download feature, which fails to properly validate filepaths provided in requests. Unauthenticated attackers can leverage this weakness by supplying a specially crafted HTTP request containing path traversal sequences to read arbitrary files directly from the server's filesystem. Successful exploitation allows for the disclosure of sensitive server files, including critical configuration data and authentication credentials, potentially leading to complete unauthorized access to the application and underlying system resources. This vulnerability carries a CVSS v3.1 base score of 9.8, indicating a severe risk to affected organizations.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn unauthenticated attacker identifies an internet-facing instance of Bold Reports Standalone Report Designer vulnerable to CVE-2026-65689.\u003c/li\u003e\n\u003cli\u003eThe attacker constructs a malicious HTTP request targeting the application's database download feature.\u003c/li\u003e\n\u003cli\u003eThis crafted request includes path traversal sequences, such as \u003ccode\u003e../\u003c/code\u003e or \u003ccode\u003e..%2f\u003c/code\u003e, embedded within the filename or path parameter intended for the download.\u003c/li\u003e\n\u003cli\u003eThe vulnerable application, due to missing filepath validation, processes the request and resolves the traversed path.\u003c/li\u003e\n\u003cli\u003eThe server attempts to read the file specified by the attacker from an arbitrary location on its filesystem.\u003c/li\u003e\n\u003cli\u003eIf the file exists and permissions allow, its content is returned to the attacker as part of the download response.\u003c/li\u003e\n\u003cli\u003eThe attacker analyzes the disclosed file for sensitive information, such as authentication credentials, configuration files, or other proprietary data.\u003c/li\u003e\n\u003cli\u003eUsing the exfiltrated credentials, the attacker can gain further unauthorized access to the Bold Reports application or other connected systems.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe successful exploitation of CVE-2026-65689 allows unauthenticated attackers to perform arbitrary file reads on the server hosting Bold Reports Standalone Report Designer. This can lead to the disclosure of highly sensitive information, including user credentials, configuration files, and proprietary application data. Such disclosures enable attackers to escalate privileges, gain full unauthorized access to the application, compromise underlying server infrastructure, and potentially exfiltrate critical business data. Given the unauthenticated nature and the ability to read credentials, the potential for a complete system compromise is high, affecting the confidentiality, integrity, and availability of the application and its data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately apply the patch by upgrading Bold Reports Standalone Report Designer to version 14.1.12 or later to address CVE-2026-65689.\u003c/li\u003e\n\u003cli\u003eDeploy the provided Sigma rule to your SIEM to detect attempts at path traversal exploitation against your web infrastructure.\u003c/li\u003e\n\u003cli\u003eEnsure web server logs (category \u003ccode\u003ewebserver\u003c/code\u003e) are configured to capture full URI stems and query parameters for detection of suspicious patterns.\u003c/li\u003e\n\u003cli\u003eImplement Web Application Firewall (WAF) rules to detect and block requests containing common path traversal sequences (\u003ccode\u003e../\u003c/code\u003e, \u003ccode\u003e%2e%2e%2f\u003c/code\u003e, etc.) targeting web applications.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-23T14:21:18Z","date_published":"2026-07-23T14:21:18Z","id":"https://feed.craftedsignal.io/briefs/2026-07-cve-2026-65689-bold-reports-designer/","summary":"A missing filepath validation vulnerability (CVE-2026-65689) in Bold Reports Standalone Report Designer before version 14.1.12 allows unauthenticated attackers to perform path traversal by sending a crafted request to the database download feature, enabling them to read arbitrary sensitive server files, including authentication credentials, and potentially gain full unauthorized access to the application.","title":"CVE-2026-65689: Bold Reports Standalone Report Designer Path Traversal Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-07-cve-2026-65689-bold-reports-designer/"}],"language":"en","title":"CraftedSignal Threat Feed - Bold Reports","version":"https://jsonfeed.org/version/1.1"}