{"affected":[{"defaultStatus":"unaffected","product":"Telerik Report Server","source":"CNA: ProgressSoftware","vendor":"Progress Software","versions":[{"lessThan":"12.3.26.1110","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-106133","cwes":["CWE-863"],"description":"In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: ProgressSoftware","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}],"modifiedAt":1794418356189,"publishedAt":1794418356189,"references":[{"source":"CNA: ProgressSoftware","tags":["vendor-advisory"],"url":"https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-incorrect-authorization-cve-2026-106133"}],"remediation":[],"revision":"6778a8edd71c3edfbcf136c2642afaaa54916fd62b86c2a8aedce68c407925a6","sources":[{"modifiedAt":1794418356189,"name":"CNA: ProgressSoftware","retrievedAt":1794420621608,"url":"https://www.cve.org/CVERecord?id=CVE-2026-106133"}],"ssvc":null,"status":"published","title":"Incorrect Authorization in Telerik Report Server Web Report Designer","updatedAt":1794420621608}