CVE-2024-6327

—

CVSS 3.1

9.8 critical

EPSS

2%p80

Published

Jul 24, 2024 (Jul 24, 2024)

Modified

Jun 17, 2026

Description

In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability.

Vendors: progress
Products: telerik report server
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news4 stories

Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI

Help Net SecurityJul 28, 00:00 UTC · Jul 28, 2024Exploit / PoC CVE-2024-6327 CVE-2024-41110

Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

The Hacker NewsJul 27, 05:40 UTC · Jul 27, 2024Vulnerability in the wildCVE-2024-6327 CVE-2024-4358

Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)

Help Net SecurityJul 26, 00:00 UTC · Jul 26, 2024Vulnerability in the wildCVE-2024-6327 CVE-2024-6096 CVE-2024-4358+1 CVEs

Progress Software fixed critical RCE CVE-2024

Security AffairsJul 25, 20:27 UTC · Jul 25, 2024Vulnerability in the wildCVE-2024-6327 CVE-2024-1800 CVE-2024-4358