TR
Product
Telerik Report Server
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 4Medium 3Low 0
Watch
Add Telerik Report Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4358 In wildKEV | 9.8 | May 29 | Registration Authentication Bypass Vulnerability Affected: 1.0.0.0 before 10.1.24.514 |
| CVE-2026-106155 | 8.9 | Oct 9 | Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers Affected: before 12.2.26.1007 |
| CVE-2024-7292 | 8.8 | Oct 9 | Account Controller allows high count of login attempts Affected: 1.0.0.0 before 2024 Q3\/10.2.24.806\/ |
| CVE-2024-1800 | 8.8 | Mar 20 | Progress Telerik Report Server Deserialization Affected: 1.0.0.0 before 10.0.24.130 |
| CVE-2026-106145 | 7.1 | Oct 9 | Privilege Escalation in Telerik Report Server Service-Agent Hub Affected: before 12.2.26.1007 |
| CVE-2025-0556 | 6.5 | Feb 12 | Telerik Report Server Clear Text Transmission of Agent Commands Affected: 1.0.0 before 2025 Q1 (11.0.25.211) |
| CVE-2024-4357 | 6.5 | May 15 | XML External Entity Processing Information Disclosure Affected: 1.0.0.0 before 10.0.24.514 |
| CVE-2024-4837 | 5.3 | May 15 | Trust Boundary Violation Vulnerability Affected: 1.0.0.0 before 10.1.24.514 |
Showing 8