CVE-2026-106155

Vendor

Oracle

Product

java

CVSS

8.9

EPSS

0.002 (p10)

Exposure class

File transfer

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 22
   CVE NVD 23d ago

   In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows…

   In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report…

   CVSS 8.9 CVE-2026-106155 Oracle