NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2024-1800

CVSS 3.1: 8.8 high
EPSS: 40%p99
Published: Mar 20, 2024 · Mar 20, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-1800 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.

Vendors: progress

Products: telerik report server

Weakness: CWE-502

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (40.4%)

In the news

6 stories

Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)

Help Net SecurityJul 26, 00:00 UTC · Jul 26, 2024VulnerabilityExploitedCVE-2024-6327 CVE-2024-6096 CVE-2024-4358+11

60

Progress Software fixed critical RCE CVE-2024

Security AffairsJul 25, 20:27 UTC · Jul 25, 2024VulnerabilityExploitedCVE-2024-6327 CVE-2024-1800 CVE-2024-43584 · 1 read

60

Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecast

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2024Exploit / PoCCVE-2024-21683 CVE-2024-28995 CVE-2024-29972+43 · 1 read

60

PoC for Progress Telerik RCE chain released (CVE-2024-4358, CVE-2024-1800)

Help Net SecurityJun 6, 10:01 UTC · Jun 6, 2024Exploit / PoCExploitedCVE-2024-4358 CVE-2024-1800 CVE-2023-343622 · 1 read

60

Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

The Hacker NewsJun 5, 05:26 UTC · Jun 5, 2024VulnerabilityExploitedCVE-2024-4358 CVE-2024-18003 · 1 read

60

Experts released PoC exploit code for a critical bug in Progress Telerik Report Servers

Security AffairsJun 4, 10:40 UTC · Jun 4, 2024Exploit / PoCCVE-2024-4358 CVE-2024-18002

60