Product
Progress Telerik Report Server versions prior to 12.3.26.1110 are vulnerable to an external control of a system configuration setting, allowing unauthenticated remote attackers to influence generated notification links and potentially achieve account takeover.