Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Telerik UI for ASP.NET AJAX — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in Telerik UI for ASP.NET AJAX, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities identified in Telerik UI for ASP.NET AJAX, a server-side web control library developed by Progress. The collection documents various software flaws and security weaknesses disclosed within this specific product suite over the last several years. By reviewing these entries, readers can track the vendor's security advisories, understand common weakness classes such as cross-site scripting or authentication bypasses, and examine the product's historical vulnerability record to assess its overall security posture. The data provides a centralized reference for security professionals and developers who rely on these controls in their applications. This resource helps in identifying recurring patterns in the library's codebase and evaluating the impact of past disclosures on current deployments. The information is presented in a structured format to facilitate quick reference and comparative analysis of different vulnerability types affecting the same software component. Users can filter or sort the data based on release versions or weakness categories to focus on specific areas of interest relevant to their infrastructure. This aggregated view supports informed decision-making regarding patch management and risk mitigation strategies for organizations utilizing Telerik UI components in their enterprise environments. The focus remains strictly on factual reporting of known issues, without speculative analysis or marketing commentary.

Vendor: Progress Software

CVE ID Title CVSS Severity Published
CVE-2026-19219 DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX CWE-345 8.1 High 2026-09-02
CVE-2026-18672 RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX CWE-22 7.5 High 2026-09-02
CVE-2026-14932 Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart CWE-321 6.5 Medium 2026-07-22
CVE-2026-14865 XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX CWE-776 5.3 Medium 2026-07-22
CVE-2026-13192 RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX CWE-918 6.5 Medium 2026-07-22
CVE-2026-13190 PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX CWE-502 8.1 High 2026-07-22
CVE-2026-13189 SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX CWE-36 7.5 High 2026-07-22
CVE-2026-13188 DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX CWE-345 5.9 Medium 2026-07-22
CVE-2026-13187 DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX CWE-470 8.1 High 2026-07-22
CVE-2026-13186 AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX CWE-22 8.1 High 2026-07-22
CVE-2026-13185 PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX CWE-502 8.1 High 2026-07-22
CVE-2026-13184 RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX CWE-321 7.5 High 2026-07-22
CVE-2026-13183 RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX CWE-208 7.5 High 2026-07-22
CVE-2026-13182 RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX CWE-209 7.5 High 2026-07-22
CVE-2026-13181 RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX CWE-470 8.1 High 2026-07-22
CVE-2026-6023 Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX CWE-502 8.1 High 2026-04-22
CVE-2026-6022 Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX CWE-400 7.5 High 2026-04-22
CVE-2026-2878 Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX CWE-331 5.3 Medium 2026-02-25
CVE-2025-3600 Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX 7.5 High 2025-05-14

All 19 known CVE vulnerabilities affecting Telerik UI for ASP.NET AJAX with full Chinese analysis, references, and POCs where available.