Read the docs

helicalinsight

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

helicalinsight records in CISA KEV

No helicalinsight vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75420 CVE-2026-111634 · GHSA-cjph-845q-jxp4

SQL injection in Helical Insight via /executeDatasource

Priority HIGH 72

Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00328 Published 2026-10-16 No fix listed CWE-89
TI-2026-75421 CVE-2026-111635 · GHSA-476f-2g9x-c9v7

Path traversal in Helical Insight lets viewers read arbitrary files

Priority MEDIUM 57

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00397 Published 2026-10-16 No fix listed CWE-22
Open these records in search →