PatchTheCVEstandalone report designer vulnerabilities and fixes
Recent CVEs affecting standalone report designer, with upgrade or downgrade steps. 4 tracked.
Also searched as: standalonereportdesigner.
standalone report designer has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-23. Highest priority: CVE-2026-65687 (score 57/100).
- CVE-2026-65687 CRITICAL 9.8 UPGRADE Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in
- CVE-2026-65688 CRITICAL 9.8 UPGRADE Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in
- CVE-2026-65689 CRITICAL 9.8 UPGRADE Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in
- CVE-2026-65690 HIGH 8.8 UPGRADE Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in
FAQ
How do I fix standalone report designer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is standalone report designer being exploited right now?
None of the tracked standalone report designer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which standalone report designer CVE should I patch first?
CVE-2026-65687 currently ranks highest (57/100): Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in.