CVE-2026-65688

Name of the Vulnerable Software and Affected Versions Bold Reports Standalone Report Designer versions 6.3 through 14.1.11

Description A missing filepath validation in the font processing feature of the DataHub module allows unauthenticated attackers to read arbitrary files from the server filesystem via a crafted request. This path traversal weakness can be used to disclose sensitive server files, such as authentication credentials, potentially leading to full unauthorized access to the application.

Recommendations Update Bold Reports Standalone Report Designer to version 14.1.12.