Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/10/14 2:17 p.m.•42 views

CVE-2026-110632 Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...

9.2CVSS0.00672EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/14 2:17 p.m.•9 views

EUVD-2026-101260

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...

9.2CVSS6.1AI score0.00672EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/14 2:17 p.m.•28 views

CVE-2026-110632

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 . This vulnerability allows remote attackers to invoke the UpdateConfigReferent method to redirect the SYSTEM updater to a malicious reference server. By serving modified module archives with matchi...

9.2CVSS6AI score0.00672EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•6 views

CVE-2026-110632: Missing Authentication for Critical Function

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module...

9.2CVSS6.1AI score0.00672EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-114074

Name of the Vulnerable Software and Affected Versions MyReport Updater versions prior to 2.1.2 Description An unauthenticated gRPC service is exposed on TCP port 9095, allowing remote attackers to redirect the SYSTEM updater. This is achieved by invoking the UpdateConfigReferent method. Attackers...

9.2CVSS6AI score0.00672EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/10/13 4:00 p.m.•9 views

Report One MyReport Updater Authorization Issue Vulnerability

Report One: MyReport Updater 2.1.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for the gRPC service on port TCP 9095. A remote attacker can redirect the SYSTEM update program to a malicious reference server that provides...

9.2CVSS5.9AI score0.00672EPSS
SaveExploits0References3
Rows per page
Query Builder