TantoSec

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 7, 2026
Last mentionedSep 7, 2026

Timeline

1 articles · newest first

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.

The Hacker NewsSep 7, 11:20 UTC · Sep 7, 2026Exploit / PoCCVE-2026-13181 CVE-2026-13182 CVE-2026-13183+34 · 2 reads

Related CVEs

by mentions

CVE-2019-18935100%9.8
Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX
published Dec 11, 2019Telerik (Progress) UI for ASP.NET AJAXKEVRansomwarePoC ×4
CVE-2026-13185<1%8.1
In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13181<1%8.1
In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13184<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13183<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13182<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse…
published Jul 22, 2026progress telerik ui for asp.net ajax

Appears with

RadPersistenceManagerproduct · 1
IONIXorganization · 1
RadAsyncUploadproduct · 1
RadDockLayoutproduct · 1
Progress Softwareorganization · 1
Progress Softwarevendor · 1
Telerik UI for ASP.NET AJAXproduct · 1
Telerikorganization · 1
Telerikvendor · 1
CODE WHITEorganization · 1

Entities are extracted by the model from each article. First seen Sep 7, 2026, last mentioned Sep 7, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.