7 matches found
CVE-2026-110632
Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...
CVE-2026-110633 MyReport Updater through 2.1.1 Local Privilege Escalation via Updater Service
MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories. Attackers can use UpdaterManager.exe over gRPC to set a malicious reference server...
EUVD-2026-101261
MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories. Attackers can use UpdaterManager.exe over gRPC to set a malicious reference server...
CVE-2026-110633
MyReport Updater through version 2.1.1 is vulnerable to a local privilege escalation flaw. The issue stems from the Updater service , where low-privileged users can manipulate UpdaterManager.exe over gRPC to specify a malicious reference server and installation location. This allows an attacker t...
CVE-2026-110632 Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE
Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...
EUVD-2026-101260
Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...
CVE-2026-110632
Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 . This vulnerability allows remote attackers to invoke the UpdateConfigReferent method to redirect the SYSTEM updater to a malicious reference server. By serving modified module archives with matchi...