What is GHSA-w8jm-83gh-rh4m?

GHSA-w8jm-83gh-rh4m is a security advisory published by GitHub Security Advisories with Medium severity. In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization...

Which CVE IDs does GHSA-w8jm-83gh-rh4m cover?

GHSA-w8jm-83gh-rh4m covers the following CVE IDs: CVE-2026-106133. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w8jm-83gh-rh4m?

GHSA-w8jm-83gh-rh4m has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-w8jm-83gh-rh4mMediumCVSS 6.3

In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-106133 →

📋 Description

In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-106133
https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-incorrect-authorization-cve-2026-106133
https://github.com/advisories/GHSA-w8jm-83gh-rh4m