Telerik Document Processing before 2026.3.1027 can exhaust resources (CVE-2026-118035)
Canada's Cyber Centre points administrators to Progress's advisory for RadWordsProcessing and says to apply updates when available.
Stories per day · 30 days
3 RSS
3 stories, newest first · one card per story
Stories tagged #telerik
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.
Progress Software security advisory (AV26-875)
Canada's Cyber Centre warns Progress Telerik UI for ASP.NET AJAX before 2026.3.812 is affected by path traversal and upload tampering flaws, urging updates.