CVE-2026-106145

Published 9 October 2026 · tracked since 10 October 2026

Description

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server settings-s

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107804 MEDIUM 5.3
• CVE-2026-107805 HIGH 7.5
• CVE-2026-105278 CRITICAL 9.8
• CVE-2026-104081 HIGH 8.1
• CVE-2026-94067 HIGH 8.1
• CVE-2026-94064 HIGH 8.8
• CVE-2026-94065 HIGH 8.8
• CVE-2026-100730 CRITICAL 9.8
• CVE-2026-94062 HIGH 8.1
• CVE-2026-62028 MEDIUM 5.4

→ Open the live CVE board · all tools