CVE-2024-1800

—

CVSS 3.1

8.8 high

EPSS

40%p99

Published

Mar 20, 2024 (Mar 20, 2024)

Modified

Jun 17, 2026

Description

In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.

Vendors: progress
Products: telerik report server
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (40.4%)

In the news6 stories

Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)

Help Net SecurityJul 26, 00:00 UTC · Jul 26, 2024Vulnerability in the wildCVE-2024-6327 CVE-2024-6096 CVE-2024-4358+1 CVEs

Progress Software fixed critical RCE CVE-2024

Security AffairsJul 25, 20:27 UTC · Jul 25, 2024Vulnerability in the wildCVE-2024-6327 CVE-2024-1800 CVE-2024-43581

Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecast

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2024Exploit / PoC CVE-2024-21683 CVE-2024-28995 CVE-2024-29972+4 CVEs

PoC for Progress Telerik RCE chain released (CVE-2024-4358, CVE-2024-1800)

Help Net SecurityJun 6, 10:01 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2024-4358 CVE-2024-1800 CVE-2023-34362

Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

The Hacker NewsJun 5, 05:26 UTC · Jun 5, 2024Vulnerability in the wildCVE-2024-4358 CVE-2024-1800

Experts released PoC exploit code for a critical bug in Progress Telerik Report Servers

Security AffairsJun 4, 10:40 UTC · Jun 4, 2024Exploit / PoC CVE-2024-4358 CVE-2024-1800