CVE-2024-1856

Summary

CVE-2024-1856 is a newly disclosed vulnerability affecting In Progress® Telerik® Reporting versions before Q1 2024 (18.0.24.130). This issue permits remote code execution, enabling threat actors to exploit insecure deserialization processes. By sending specially crafted data to the affected system, attackers can execute arbitrary code and potentially gain unauthorized access. This vulnerability poses a significant risk and necessitates immediate remediation steps, such as applying the latest software patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.