CVE-2026-52610

reportico-web (≤8.1.0) exposes an arbitrary file write/directory traversal flaw in run.php: the saveTemplate parameter combined with execute_mode=PREPARE lets remote attackers create or overwrite any file writable by the web user. No exploit code, CVE List, or CVSS score is provided in the docume...