Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: helicalinsight Clear all filters
TI-2026-75421 CVE-2026-111635 · GHSA-476f-2g9x-c9v7

Path traversal in Helical Insight lets viewers read arbitrary files

Priority MEDIUM 57

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00397 Published 2026-10-16 No fix listed CWE-22
TI-2026-75420 CVE-2026-111634 · GHSA-cjph-845q-jxp4

SQL injection in Helical Insight via /executeDatasource

Priority HIGH 72

Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00328 Published 2026-10-16 No fix listed CWE-89