https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6097.htmlhttps://patchthecve.com/cve/CVE-2024-6097.htmlWed, 17 Jun 2026 08:17:16 +0000MEDIUM 5.3: In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat actor through an absolute path vulnerability.https://patchthecve.com/cve/CVE-2024-8048.htmlhttps://patchthecve.com/cve/CVE-2024-8048.htmlWed, 17 Jun 2026 08:21:45 +0000HIGH 7.8: In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.https://patchthecve.com/cve/CVE-2024-8014.htmlhttps://patchthecve.com/cve/CVE-2024-8014.htmlWed, 17 Jun 2026 08:21:40 +0000HIGH 8.8: In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.https://patchthecve.com/cve/CVE-2024-7840.htmlhttps://patchthecve.com/cve/CVE-2024-7840.htmlWed, 17 Jun 2026 08:21:01 +0000HIGH 7.8: In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.https://patchthecve.com/cve/CVE-2024-7294.htmlhttps://patchthecve.com/cve/CVE-2024-7294.htmlWed, 17 Jun 2026 08:19:47 +0000HIGH 7.5: In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.https://patchthecve.com/cve/CVE-2024-7293.htmlhttps://patchthecve.com/cve/CVE-2024-7293.htmlWed, 17 Jun 2026 08:19:47 +0000HIGH 7.5: In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.https://patchthecve.com/cve/CVE-2024-6096.htmlhttps://patchthecve.com/cve/CVE-2024-6096.htmlWed, 17 Jun 2026 08:17:16 +0000HIGH 8.8: In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability.https://patchthecve.com/cve/CVE-2024-1856.htmlhttps://patchthecve.com/cve/CVE-2024-1856.htmlWed, 17 Jun 2026 07:05:09 +0000HIGH 8.5: In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability.https://patchthecve.com/cve/CVE-2024-1801.htmlhttps://patchthecve.com/cve/CVE-2024-1801.htmlWed, 17 Jun 2026 07:05:02 +0000HIGH 7.7: In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.https://patchthecve.com/cve/CVE-2024-0832.htmlhttps://patchthecve.com/cve/CVE-2024-0832.htmlWed, 17 Jun 2026 06:54:23 +0000HIGH 7.8: In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package t