Description
In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik Report Server | 0 <12.3.26.1110 | — |
Advisories 1
- WID-SEC-2026-4534 Progress Software Telerik Report Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026