CVE-2026-106155— Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
Quick assessment
Affected
Progress Software Telerik Report Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Telerik® Report Server 12.2.26.1007 之前的 In Progress® 版本中，共享报表引擎存在一个存储型跨站脚本（XSS）漏洞。已认证的报表作者可以在报表导航操作或 HTML 文本框链接中嵌入 javascript: 或 vbscript: URL。当其他用户查看该恶意报表并触发嵌入的导航时，攻击者控制的脚本将在 Web 报表查看器的上下文中执行。在多人使用的 Report Server 部署环境中，此漏洞可导致权限提升，攻击者可以利用高权限用户（包括管理员）的已认证会话执行
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1098 · Account Manipulation T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-106155
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
Source: CVE Program / CVE List V5
Vulnerability Description
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views the malicious report and the embedded navigation is triggered, attacker-controlled script can execute in the web report viewer's origin. In a multi-user Report Server deployment, this can enable privilege escalation by performing actions in a higher-privilege user's authenticated session, including an administrator's session.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Progress Software | Telerik Report Server | 0 ~ 12.2.26.1007 | - |
|
II. Public POCs for CVE-2026-106155
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-106155
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-106155 (1)
IV. Related Vulnerabilities
Same product: Telerik Report Server
-
CVE-2026-106145
Privilege Escalation in Telerik Report Server Service-Agent -
CVE-2025-0556
Telerik Report Server Clear Text Transmission of Agent Comma -
CVE-2024-7295
Hard-coded credentials used for temporary and cache data enc -
CVE-2024-7292
Account Controller allows high count of login attempts -
CVE-2024-7294
Uncontrolled resource consumption of anonymous endpoints
Same vendor: Progress Software
-
CVE-2026-106145
Privilege Escalation in Telerik Report Server Service-Agent -
CVE-2026-106164
Infinite Loop in Telerik Document Processing XLS Import -
CVE-2026-91140
OS command injection in Progress Software Autonomous REST Co -
CVE-2026-92931
CWE-918: Server-Side Request Forgery in the Progress Sitefin -
CVE-2026-77805
Weak Executable Signature Verification Vulnerability in Prog
Same weakness: CWE-79
-
CVE-2026-92085
Stored XSS in TMT Machine's Talassoft Industrial Management -
CVE-2026-94060
WordPress Voldor theme <= 1.0.0 - Reflected Cross Site Scrip -
CVE-2026-94061
WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cro -
CVE-2026-94059
WordPress Ogency theme <= 1.0.0 - Reflected Cross Site Scrip -
CVE-2026-94058
WordPress Treck theme <= 1.0.0 - Reflected Cross Site Script
V. Comments for CVE-2026-106155
No comments yet