CVE-2026-65690

Name of the Vulnerable Software and Affected Versions Bold Reports Standalone Report Designer versions 6.3 through 14.1.11

Description A missing filepath validation issue exists in the file upload functionality within the DataHub module. Authenticated attackers can use a crafted filename to perform path traversal, allowing them to access directories outside the intended scope and execute arbitrary commands with high privileges on the server.

Recommendations Update Bold Reports Standalone Report Designer to version 14.1.12. Restrict access to the DataHub module to minimize the risk of exploitation.