CVE-2026-106133Incorrect Authorization in Telerik Report Server Web Report Designer

Descripción

In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-incorrect-authorization-cve-20… vendor-advisory