High · 8.1 CVE-2026-13187 EUVD-2026-47692GHSA-jpmx-7c66-9jwf

DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX

Published Jul 22, 2026 · Updated Jul 24, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: Telerik UI for ASP.NET AJAX

Description

In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, potentially altering dialog processing and enabling chained exploitation.

Affected products

Vendor	Product	Affected	Fixed
Progress Software	Telerik UI for ASP.NET AJAX	2011.2.712 – < 2026.2.708	2026.2.708

References

https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-dialoghandler-provider-type-tampering-CVE-2026-13187 vendor-advisory