Incorrect Authorization Vulnerability in Telerik Report Server
CVE-2026-106133

6.3MEDIUM

Key Information:

Vendor: Progress Software
Status: Telerik Report Server
Vendor: CVE Published:; 11 November 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-106133?

An incorrect authorization issue found in Telerik Report Server prior to version 12.3.26.1110 enables an authenticated user with minimal privileges to carry out unauthorized actions on shared report resources. This vulnerability could compromise the integrity and availability of these resources, posing significant risks to organizations that rely on the affected version of the report server for data reporting and analysis.

Affected Version(s)

Telerik Report Server 0 < 12.3.26.1110

References

https://www.telerik.com/report-server/documentation/knowl...

vendor-advisory

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 11, 2026
Vulnerability Reserved
Oct 6, 2026

Credit

Noam Frenkel

CVE-2026-106133 Data

JSON