LIVE · cybersecurity feed
Live wire
vendor

Syncfusion

5 CVEs published in the last four months. Exploited flaws first.

Critical3
High1
Medium1
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-656879.8criticalstandalone report designerBold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its44d ago
CVE-2026-656889.8criticalstandalone report designerBold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its44d ago
CVE-2026-656899.8criticalstandalone report designerBold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its44d ago
CVE-2026-656908.8highstandalone report designerBold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its44d ago
CVE-2025-632605.4mediumsyncfusionSyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and 169d ago

Filter the full tracker by Syncfusion