Telerik Report Server (< 12.3.26.1110) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/telerik-report-server--12.3.26.1110/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 20:06:38 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgProgress Telerik Report Server: Configuration setting vulnerability (CVE-2026-106152)https://feed.craftedsignal.io/briefs/2026-11-telerik-report-server-config-cve-2026-106152/Wed, 11 Nov 2026 20:06:38 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-telerik-report-server-config-cve-2026-106152/Progress Telerik Report Server versions prior to 12.3.26.1110 are vulnerable to an external control of a system configuration setting, allowing unauthenticated remote attackers to influence generated notification links and potentially achieve account takeover.Progress Telerik Report Server versions prior to 12.3.26.1110 contain a vulnerability regarding external control of system configuration settings (CVE-2026-106152). An unauthenticated remote attacker can influence the server address used by the Report Server when generating notification links and system communications.

Impact

Exploitation of this vulnerability, combined with user interaction, may lead to the disclosure of sensitive information and potential account takeover.

Recommendation

  • Upgrade Progress Telerik Report Server to version 12.3.26.1110 or later immediately.
  • Review server access logs for anomalous requests to Report Server configuration endpoints that may indicate attempts to influence system settings.
]]>highadvisory