Advisories · Technology

Progress Software Telerik Report Server.

Every CVE that names Progress Software Telerik Report Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-106155 CVE record

CVSS 8.9 High

Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
- Progress Software Telerik Report Server
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2026
CVE-2026-106145 CVE record

CVSS 7.1 High

Privilege Escalation in Telerik Report Server Service-Agent Hub
- Progress Software Telerik Report Server
- Privilege escalation
Not analysed yet 9 Oct 2026
CVE-2025-0556 CVE record

CVSS 8.8 High

Telerik Report Server Clear Text Transmission of Agent Commands
- Progress Software Telerik Report Server
- Weak cryptography or TLS
Not analysed yet 12 Feb 2025
CVE-2024-4837 CVE record

CVSS 5.3 Medium

Trust Boundary Violation Vulnerability
- Progress Software Telerik Report Server
- Information disclosure
Not analysed yet 15 May 2024
CVE-2024-4357 CVE record

CVSS 6.5 Medium

XML External Entity Processing Information Disclosure
- Progress Software Telerik Report Server
- XML external entities (XXE)
Not analysed yet 15 May 2024