CVE-2024-7292: Progress Telerik Report Server

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.

Affected products

• Progress Telerik Report Server: before 10.2.24.806 (fixed in 10.2.24.806)

Published 2024-10-09. Last modified 2026-06-17.