GCVE - cpe:2.3:a:report_one:myreport

Approved changes feed: RSS · Atom

cpe:2.3:a:report_one:myreport_updater:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Report One (`4f15f649-9efe-525a-84e0-f4dbe2bf437d`)
Product	Myreport Updater (`0886f7d5-0bd5-51b5-bd5d-488117ee52d5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-110633`	vulnerable	2026-11-03 10:16:00.841793	db.gcve.eu details are currently unavailable. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-110632`	vulnerable	2026-11-03 10:16:00.620485	Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE HIGH (8.1) Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module archives with matching MD5 digests to write files and execute code as SYSTEM. Published: 2026-10-14T14:17:05.863Z Updated: 2026-10-14T18:15:09.958Z Open on db.gcve.eu Reference links https://blog.quarkslab.com/myreport-updater-from-grpc-to-system.html https://www.myreport.fr/myreport/ https://www.vulncheck.com/advisories/report-one-myreport-updater-through-2.1.1-unauthenticated-grpc-service-rce	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.