Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Progress Software Telerik Report Server 12.2.26.1007 Clear all filters
TI-2026-69870 CVE-2026-106155 · GHSA-97qc-r4xh-88c5

Stored cross-site scripting in Telerik Report Server web report viewers

Priority MEDIUM 40

In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs i…

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00199 Published 2026-10-09 Fixed in 12.2.26.1007 CWE-79
TI-2026-69869 CVE-2026-106145 · GHSA-mqv8-78j6-26gw

Privilege escalation in Telerik Report Server service-agent hub

Priority LOW 30

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bea…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00145 Published 2026-10-09 Fixed in 12.2.26.1007 CWE-266