CVE-2026-65690 in Standalone Report Designer
要約
〜によって MITRE • 2026年07月23日
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to traverse outside the intended directory by supplying a crafted filename. Attackers can exploit this path traversal weakness to execute arbitrary commands with high privileges on the server.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.