by Kastro
Paper/Archive/CVE-2026-65688

CVE-2026-65688

Bold Reports (By SyncFusion) Standalone Report Designer — Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Font Processing

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.7.587 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path traversal weakness to disclose sensitive server files, including authentication credentials, enabling full unauthorized access to the application. The vulnerability is specific to the DataHub module, which was introduced in Bold Reports 6.3. Therefore, versions prior to 6.3 are not affected.

Affected

ProductAffectedFixed inSource
Standalone Report Designer6.3–CNA
Standalone Report Designer7.1.10–CNA
Standalone Report Designer9.1–CNA
Standalone Report Designer10.1–CNA
Standalone Report Designer11.1–CNA
Standalone Report Designer12.1–CNA
Standalone Report Designer13.1–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refboldreports.com/resources/release-history/standalone-report-designer/14-1#14-1-12writeupvulncheck.com/advisories/bold-reports-standalone-report-designer-arbitrary-file-read-via-font-processing