Syncfusion vulnerabilities

Products

• Standalone Report Designer 4

Newest

• bold reports (by syncfusion) standalone report designer Bold Reports Standalone Report Designer < 14.1.12 Path Traversal RCE via File Upload CVE-2026-65690 8.7 HighJuly 23, 2026
• bold reports (by syncfusion) standalone report designer Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download CVE-2026-65689 9.3 CriticalJuly 23, 2026
• bold reports (by syncfusion) standalone report designer Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Font Processing CVE-2026-65688 9.3 CriticalJuly 23, 2026
• bold reports (by syncfusion) standalone report designer Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via SVG Processing CVE-2026-65687 9.3 CriticalJuly 23, 2026
• syncfusion ej2-javascript-ui-controls syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection CVE-2026-16630 4.8 MediumJuly 22, 2026
• syncfusion SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to... CVE-2025-63260 5.4 MediumMarch 20, 2026
• syncfusion ej2 aspcore file provider The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs... CVE-2023-26564 9.8 CriticalJuly 12, 2023
• syncfusion nodejs file system provider The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory... CVE-2023-26563 9.8 CriticalJuly 12, 2023