Skip to content
OpenAdvisories

Product · Progress Software

Telerik UI for ASP.NET AJAX

19 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-19219 Public exploit

    DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders t…

  • High 8.1
    CVE-2026-13181 Public exploit

    RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments.

  • High 8.1
    CVE-2026-6023 Public exploit

    Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client. If an attacker tampers with this state, a server-side…