Telerik

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 2, 2026
Last mentionedSep 7, 2026

Timeline

2 articles · newest first

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.

The Hacker NewsSep 7, 11:20 UTC · Sep 7, 2026Exploit / PoCCVE-2026-13181 CVE-2026-13182 CVE-2026-13183+34 · 2 reads

Progress Software security advisory (AV26-875)

Canada's Cyber Centre warns Progress Telerik UI for ASP.NET AJAX before 2026.3.812 is affected by path traversal and upload tampering flaws, urging updates.

Canadian Centre for Cyber SecuritySep 2, 15:33 UTC · Sep 2, 2026AdvisoryCVE-2026-18672 CVE-2026-192192 · 1 read

Related CVEs

by mentions

CVE-2019-18935100%9.8
Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX
published Dec 11, 2019Telerik (Progress) UI for ASP.NET AJAXKEVRansomwarePoC ×4
CVE-2026-13185<1%8.1
In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-19219<1%8.1
Potential RCE in Progress Telerik UI for ASP.NET AJAX via dialog parameter tampering
published Sep 2, 2026Progress Software Telerik UI for ASP.NET AJAX (RadEditor file browser dialogs)
CVE-2026-13181<1%8.1
In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13183<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13182<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-18672<1%7.5
Unauthenticated Path Traversal File Read in Telerik UI for ASP.NET AJAX RadImageEditor
published Sep 2, 2026Progress Telerik UI for ASP.NET AJAX (RadImageEditor component)
CVE-2026-13184<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload…
published Jul 22, 2026progress telerik ui for asp.net ajax

Appears with

Progress Softwarevendor · 2
Telerik UI for ASP.NET AJAXproduct · 2
RadAsyncUploadproduct · 1
RadDockLayoutproduct · 1
Progress Softwareorganization · 1
Telerikorganization · 1
TantoSecorganization · 1
Canadian Centre for Cyber Securityorganization · 1
RadPersistenceManagerproduct · 1
CODE WHITEorganization · 1
IONIXorganization · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned Sep 7, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.