CVE-2024-0832: Progress Telerik Reporting

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.

Affected products

• Progress Telerik Reporting: before 18.0.24.130 (fixed in 18.0.24.130)

Published 2024-01-31. Last modified 2026-06-17.