CVE-2024-7840

HIGH 7.8CVE-2024-7840 · Published 09/10/2024 · updated 17/06/2026

In short

CVE-2024-7840 is a HIGH (CVSS 7.8) vulnerability affecting telerik reporting (progress).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
telerik reporting progress	`≤ 18.2.24.924`	No fix yet

Description

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.

References

docs.telerik.com/reporting/knowledge-base/command-injection-cve-2024-7840 · Vendor Advisory
security.netapp.com/advisory/ntap-20250425-0004

More vulnerabilities in telerik reporting

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

telerik reporting

progress

≤ 18.2.24.924

No fix yet

More vulnerabilities in telerik reporting

See all →