Read the docs

Bold Reports (By SyncFusion)

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Bold Reports (By SyncFusion) records in CISA KEV

No Bold Reports (By SyncFusion) vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Standalone Report Designer 4 records MEDIUM Ej2 Aspcore File Provider 1 record HIGH Nodejs File System Provider 1 record HIGH Syncfusion 1 record LOW

Records

4 records in Standalone Report Designer · all components

TI-2026-46825 CVE-2026-65689 · GHSA-qw66-8h8f-7phh

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download

Priority MEDIUM 50

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server f…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00866 Published 2026-07-23 Fixed in 14.1.12 CWE-22
TI-2026-46824 CVE-2026-65688 · GHSA-mx5r-8grf-ph62

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Font Processing

Priority MEDIUM 50

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its font processing feature that allows unauthenticated attackers to read arbitrary files from the server fil…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00866 Published 2026-07-23 Fixed in 14.1.12 CWE-22
TI-2026-46823 CVE-2026-65687 · GHSA-hcq3-wvr8-3wvg

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via SVG Processing

Priority MEDIUM 50

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its SVG processing feature that allows unauthenticated attackers to read arbitrary files from the server file…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00866 Published 2026-07-23 Fixed in 14.1.12 CWE-22
TI-2026-46826 CVE-2026-65690 · GHSA-42mq-p2mg-jgxc

Bold Reports Standalone Report Designer < 14.1.12 Path Traversal RCE via File Upload

Priority MEDIUM 41

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to traverse outside the intended directory…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00901 Published 2026-07-23 Fixed in 14.1.12 CWE-22
Open these records in search →