Security Vulnerability Advisory: TVU, Progress Telerik, Vinchin, Lobster

Vulnerability Overview 1. TVU Networks Corporation - Vulnerability Description: Authentication Bypass - Affected Versions: TVU Receiver / Transceiver Web Management Interface < 7.9 2. Progress - Vulnerability Description: AppDataStorageProvider Path Traversal Deserialization - Affected Versions: Telerik UI for ASP.NET AJAX < 2026.2.708 3. Vinchin - Vulnerability Description: Multiple Unauthenticated Remote Memory Corruptions in the agentlink_server Service - Affected Versions: Vinchin Backup & Recovery <= 9.0.0.86562 4. Progress - Vulnerability Description: PersistenceFramework Cookie Deserialization - Affected Versions: Telerik UI for ASP.NET AJAX < 2026.2.708 5. Progress - Vulnerability Description: PersistenceFramework Unsafe Type Resolution - Affected Versions: Telerik UI for ASP.NET AJAX < 2026.2.708 6. Progress - Vulnerability Description: SpellChecker DictionaryLanguage Path Traversal - Affected Versions: Telerik UI for ASP.NET AJAX < 2026.2.708 7. Lobster - Vulnerability Description: Unauthenticated Remote Code Execution via Deserialization of Untrusted Data - Affected Versions: Lobster Data Platform LDP < 26.2.7, LDP < 25.1.14-LTS Scope of Impact TVU Networks Corporation: Users of the TVU Receiver / Transceiver Web Management Interface Progress: Users employing Telerik UI for ASP.NET AJAX Vinchin: Users employing Vinchin Backup & Recovery Lobster: Users employing Lobster Data Platform Remediation TVU Networks Corporation: Upgrade to TVU Receiver / Transceiver Web Management Interface version 7.9 or later Progress: Upgrade to Telerik UI for ASP.NET AJAX version 2026.2.708 or later Vinchin: Upgrade to Vinchin Backup & Recovery version 9.0.0.86562 or later Lobster: Upgrade to Lobster Data Platform version 26.2.7 or 25.1.14-LTS or later POC Code or Exploit Code No specific POC code or exploit code is included.

Goal Reached Thanks to every supporter — we hit 100%!

Security Vulnerability Advisory: TVU, Progress Telerik, Vinchin, Lobster