In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.
https://securityaffairs.com/164114/hacking/progress-telerik-report-servers-poc.html
https://www.telerik.com/report-server
https://www.telerik.com/report-server
https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-1800
https://docs.telerik.com/report-server/knowledge-base/deserialization-vulnerability-cve-2024-1800