CVE-2025-0556

Summary

CVE-2025-0556 is a vulnerability affecting In Progress® Telerik® Report Server. Versions before Q1 2025 (11.0.25.211), using the older .NET Framework implementation, are susceptible to this issue. The vulnerability stems from the communication of non-sensitive information between the service agent process and app host process, which occurs over an unencrypted tunnel. This unsecured transmission can be intercepted through local network traffic sniffing, posing a potential risk to data privacy and security. Users are advised to upgrade to a secure version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.