PatchTheCVE: telerik report serverhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-0556: In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framewohttps://patchthecve.com/cve/CVE-2025-0556.htmlhttps://patchthecve.com/cve/CVE-2025-0556.htmlWed, 17 Jun 2026 08:26:41 +0000HIGH 8.8: In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local networCVE-2024-7295: In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset dahttps://patchthecve.com/cve/CVE-2024-7295.htmlhttps://patchthecve.com/cve/CVE-2024-7295.htmlWed, 17 Jun 2026 08:19:47 +0000HIGH 7.1: In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.CVE-2024-8015: In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is phttps://patchthecve.com/cve/CVE-2024-8015.htmlhttps://patchthecve.com/cve/CVE-2024-8015.htmlWed, 17 Jun 2026 08:21:41 +0000CRITICAL 9.1: In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.CVE-2024-7292: In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is phttps://patchthecve.com/cve/CVE-2024-7292.htmlhttps://patchthecve.com/cve/CVE-2024-7292.htmlWed, 17 Jun 2026 08:19:47 +0000HIGH 7.5: In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.CVE-2024-6327: In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack ishttps://patchthecve.com/cve/CVE-2024-6327.htmlhttps://patchthecve.com/cve/CVE-2024-6327.htmlWed, 17 Jun 2026 08:17:47 +0000CRITICAL 9.9: In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability.CVE-2024-1800: In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack ihttps://patchthecve.com/cve/CVE-2024-1800.htmlhttps://patchthecve.com/cve/CVE-2024-1800.htmlWed, 17 Jun 2026 07:05:02 +0000CRITICAL 9.9: In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.