CVE-2026-52608: Improper Access Control

An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...

PT-2026-77232

Name of the Vulnerable Software and Affected Versions reportico-web versions prior to 8.1.1 Description An incorrect access control issue allows an unauthenticated attacker to inject arbitrary PHP code into the PreExecuteCode attribute of any report. This occurs regardless of the safe mode settin...

CVE-2026-52608

An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...