CVE-2024-8014: Progress Telerik Reporting

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.

Affected products

• Progress Telerik Reporting: before 18.2.24.924 (fixed in 18.2.24.924)

Published 2024-10-09. Last modified 2026-06-17.