CVE-2024-7840: Progress Telerik Reporting

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.

Affected products

• Progress Telerik Reporting: up to and including 18.2.24.924

Published 2024-10-09. Last modified 2026-06-17.