CVE record · 1 source
CVE-2026-106140
CVSS 7.3In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report…
- Vendor
- Progress Software
- Product
- Telerik Reporting
- CVSS v3.1
- 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Weakness
- CWE-502
- Exposure class
- Developer platform, File transfer
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report…
In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the…