{"id":"CVE-2026-106155","revision":"2784f971638a4c7e96b4cd6f1c706acf","records":[{"revision":"2784f971638a4c7e96b4cd6f1c706acf","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-106155","aliases":[],"title":"Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers","description":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views the malicious report and the embedded navigation is triggered, attacker-controlled script can execute in the web report viewer's origin. In a multi-user Report Server deployment, this can enable privilege escalation by performing actions in a higher-privilege user's authenticated session, including an administrator's session.","state":0,"publishedAt":"2026-10-09T07:07:57.817+00:00","modifiedAt":"2026-10-09T18:03:02.317+00:00","affected":[{"ecosystem":"Vendor product","name":"Telerik Report Server","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Progress Software\",\n                    \"product\": \"Telerik Report Server\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"12.2.26.1007\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L","score":8.9,"severity":"HIGH"}],"references":["https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-improper-neutralization-of-input-cve-2026-106155"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106155","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-106155","identifiers":["CVE-2026-106155"]},"retained":false,"historicalAffected":[]}],"coverage":[]}