Read the docs

Report One

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Report One records in CISA KEV

No Report One vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74126 CVE-2026-110632 · GHSA-c58m-4p4j-mrrh

Report One MyReport Updater Unauthenticated gRPC Service Remote Code Execution

Priority HIGH 75

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00672 Published 2026-10-14 No fix listed CWE-306
TI-2026-74127 CVE-2026-110633 · GHSA-www7-gw3x-qcrq

Local privilege escalation in MyReport Updater service

Priority LOW 36

MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00137 Published 2026-10-14 No fix listed CWE-269
Open these records in search →