FanRuan CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL FanRuan CVE published 2026-10-22

CVE-2021-48014

CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer allows unauthenticated attackers to write arbitrary files via the filePath parameter in the /WebReport/ReportServer design_save_svg operation, potentially leading to remote code execution via JSP webshell. Defenders of FineReport 9.0 instances should assess exposure and verify vulnerability to prioritize remediation e [truncated]