CVE-2026-65687

Name of the Vulnerable Software and Affected Versions Bold Reports Standalone Report Designer versions 6.3 through 14.1.11

Description A missing filepath validation issue exists in the SVG processing feature within the DataHub module. This path traversal weakness allows unauthenticated attackers to read arbitrary files from the server filesystem by sending a crafted request, potentially disclosing sensitive information such as authentication credentials and enabling unauthorized application access.

Recommendations Update Bold Reports Standalone Report Designer to version 14.1.12. Restrict access to the DataHub module to minimize the risk of exploitation.