CVE-2026-111635 is a path traversal vulnerability in Helical Insight through 7.0.0 that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. This vulnerability can lead to unauthorized access to sensitive files and potential data exposure. Helical Insight administrators and users who have access to the /getExternalResource endpoint shoul [truncated]
Helical Insight through 7.0.0 contains an SQL injection vulnerability via /executeDatasource. Authenticated viewers can inject SQL through unescaped report parameter values. Attackers can supply crafted Numeric or String placeholder values to bypass the broken SqlDetect guard, read unexposed tables, and modify data in the report's data source. This vulnerability allows attackers to potentially read sensit [truncated]
