Telerik Document Processing before 2026.3.1027 can exhaust resources (CVE-2026-118035)
Original title: Progress security advisory (AV26-1098)
Canada's Cyber Centre points administrators to Progress's advisory for RadWordsProcessing and says to apply updates when available.
The Canadian Centre for Cyber Security issued AV26-1098 on October 28, 2026, for Progress Telerik Document Processing Libraries prior to 2026.3.1027. The issue is uncontrolled resource consumption in RadWordsProcessing, tracked as CVE-2026-118035. The centre urges users and administrators to review Progress's links and apply necessary updates as they become available. No exploitation is mentioned.
Unconfirmed: The notice does not state whether attacks or a public fix are available.
- Serial AV26-1098 is dated October 28, 2026.
- Only RadWordsProcessing is named in the vulnerability title.
- Affected builds are those prior to 2026.3.1027.
- The centre says updates should be applied as they become available.
Impact: Uncontrolled resource consumption in RadWordsProcessing
| Product | Affected |
|---|---|
| Progress Telerik Document Processing Libraries | Prior to 2026.3.1027 |
- 1.Review Progress's advisory links and apply necessary updates as they become available.
- CVEs
- CVE-2026-118035
- Vendors
- Progress
- Organizations
- Canadian Centre for Cyber Security
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-118035 | DoS in Telerik RadWordsProcessing before 2026.3.1027 | 7.5 | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1098 Date: October 28, 2026 As of October 28, 2026, Progress is affected by a vulnerability in the following product: Telerik Document Processing Libraries Prior to 2026. 3. 1027 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.