CVE-2026-118975 | Progress Telerik Reporting up to 19.0.25.211 SVG Processing Engine xml external entity reference (EUVD-2026-124336)

November 12, 2026 Yanac

A vulnerability was found in Progress Telerik Reporting up to 19.0.25.211. It has been rated as critical. Affected is an unknown function of the component SVG Processing Engine. This manipulation causes xml external entity reference.

This vulnerability appears as CVE-2026-118975. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More