{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/telerik-report-server--12.3.26.1110/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:progress:telerik_report_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-106152"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Telerik Report Server (\u003c 12.3.26.1110)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Progress"],"content_html":"\u003cp\u003eProgress Telerik Report Server versions prior to 12.3.26.1110 contain a vulnerability regarding external control of system configuration settings (CVE-2026-106152). An unauthenticated remote attacker can influence the server address used by the Report Server when generating notification links and system communications.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation of this vulnerability, combined with user interaction, may lead to the disclosure of sensitive information and potential account takeover.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Progress Telerik Report Server to version 12.3.26.1110 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview server access logs for anomalous requests to Report Server configuration endpoints that may indicate attempts to influence system settings.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T20:06:38Z","date_published":"2026-11-11T20:06:38Z","id":"https://feed.craftedsignal.io/briefs/2026-11-telerik-report-server-config-cve-2026-106152/","summary":"Progress Telerik Report Server versions prior to 12.3.26.1110 are vulnerable to an external control of a system configuration setting, allowing unauthenticated remote attackers to influence generated notification links and potentially achieve account takeover.","title":"Progress Telerik Report Server: Configuration setting vulnerability (CVE-2026-106152)","url":"https://feed.craftedsignal.io/briefs/2026-11-telerik-report-server-config-cve-2026-106152/"}],"language":"en","title":"CraftedSignal Threat Feed - Telerik Report Server (\u003c 12.3.26.1110)","version":"https://jsonfeed.org/version/1.1"}