CVE-2026-52610

An arbitrary file write/directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the permissions of the web user by specifying a filename in the "saveTemplate" parameter in conjuction with...

CVE-2026-52610

CVE-2026-52610 is a critical (CVSS 9.1) arbitrary file write/directory traversal vulnerability in reportico-web versions ≤ 8.1.0 . A remote, unauthenticated attacker can create or overwrite files anywhere on the filesystem (subject to the web user's permissions) by crafting a request to the run.p...