CVE-2026-106145
Privilege Escalation in Telerik Report Server Service-Agent Hub
CVSS score
7.1
EPSS probability
%0.1
Risk score
0.0
Published
4 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.6
CVE-2026-8037 Actively exploited
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
PS
Patch verifiedEPSS %77
9.6
CVE-2026-91140
OS command injection in Progress Software Autonomous REST Connector GenAI Agents
PS
Patch verifiedEPSS %2
10.0
CVE-2026-80462
Privilege Escalation in Progress Chef Automate
PS
Patch status unknownEPSS %0
7.5
CVE-2026-18672
RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX
PS
Patch status unknownEPSS %0
8.8
CVE-2026-92931
CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK
PS
Patch status unknownEPSS %0
8.9
CVE-2026-106155
Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
PS
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-106145"