What is GHSA-c76m-mg6x-6v82?

GHSA-c76m-mg6x-6v82 is a security advisory published by GitHub Security Advisories with High severity. In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a...

Which CVE IDs does GHSA-c76m-mg6x-6v82 cover?

GHSA-c76m-mg6x-6v82 covers the following CVE IDs: CVE-2026-106152. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c76m-mg6x-6v82?

GHSA-c76m-mg6x-6v82 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-c76m-mg6x-6v82HighCVSS 8.8

In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-106152 →

📋 Description

In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration setting vulnerability allows an unauthenticated remote attacker to influence the server address used by Report Server when generating links and notifications. With user interaction, this can lead to disclosure of sensitive information and account takeover.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-106152
https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-external-control-of-system-or-configuration-setting-cve-2026-106152
https://github.com/advisories/GHSA-c76m-mg6x-6v82