---
id: 9097
title: "[CVE-2026-110632] MyReport Updater: From gRPC to SYSTEM"
cve: CVE-2026-110632
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/myreport-updater-from-grpc-to-system.html"
published_at: "2026-10-12T22:00:00Z"
tags: ["rce", "supply-chain", "git", "vulnerability-research", "privilege-escalation", "lpe", "exploit", "penetration-testing", "security", "poisoning", "quarkslab", "slcyber", "submodule", "myreport", "grpc"]
phying_url: "https://phying.com/item/9097"
lang: en
---

# [CVE-2026-110632] MyReport Updater: From gRPC to SYSTEM

## Summary

MyReport is a report generation software often used as a component of web-based applications. We describe a privilege escalation and remote code execution vulnerabilities in MyReport Updater 2.1.1 through its update configuration and gRPC service.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2026-110632
- **Published:** 2026-10-12T22:00:00Z
- **Original:** https://blog.quarkslab.com/myreport-updater-from-grpc-to-system.html
- **Phying News:** https://phying.com/item/9097