Report One
Report One Security Releases - October 2026
report-one-2026-10 Oct 1, 2026 Source: Vendor
Report One security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-110632
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-110632
BR2026-0000-030834
MyReport Updater
unclaimed
Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent m...
Credited as Lucas Laise of Quarkslab
CVE-2026-110633
BR2026-0000-030835
MyReport Updater
unclaimed
MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitr...
Credited as Lucas Laise of Quarkslab