External Control Vulnerability in Telerik Report Server
CVE-2026-106152

8.8HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Report Server
Vendor: CVE Published:; 11 November 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-106152?

The vulnerability in Telerik Report Server allows an unauthenticated remote attacker to manipulate server settings. If exploited, the attacker can modify the server address used in notifications and links generated by the server. This manipulation can lead to the accidental disclosure of sensitive user information and can facilitate potential account takeovers through user interaction.

Affected Version(s)

Telerik Report Server 0 < 12.3.26.1110

References

https://www.telerik.com/report-server/documentation/knowl...

vendor-advisory

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 11, 2026
Vulnerability Reserved
Oct 6, 2026

CVE-2026-106152 Data

JSON