CVE-2026-106145

Progress Telerik Report Server prior to version 12.2.26.1007 is vulnerable to a privilege escalation flaw due to incorrect privilege assignment in the service-agent SignalR hub . An authenticated user, such as a low-privilege or guest account with a valid bearer token, can register as a trusted s...