CVE-2026-106140
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Nov 12, 2026
Vendor
unknown
Description
In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editing operations.