CVE-2024-8015: Progress Telerik Report Server

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.

Affected products

• Progress Telerik Report Server: before 10.2.24.924 (fixed in 10.2.24.924)

Published 2024-10-09. Last modified 2026-06-17.