CVE-2026-13185 HIGH CVSS 8.1 telerik_ui_for_asp_net_ajax Verified Advisory

Telerik UI for AJAX PersistenceFramework Cookie Deserialization Vulnerability (CVE-2026-13185)

RCE Deserialization Telerik Ui For Asp Net Ajax Progress Software

In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, allowing unauthenticated remote code execution. Affected versions: - >= 2013.1.220 && <= 2026.2.519 We recommend updating to: 2026.2.708. CVSS 8.1 · our assessment: this_week Reference: https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-persistence-cookie-deserialization-CVE-2026-13185 Details: https://vuln.today/cve/CVE-2026-13185

Verified by vuln.today against published advisories.

Affected versions

– >= 2013.1.220 && <= 2026.2.519

Fixed in: 2026.2.708

Full CVE analysis Reference Published Jul 22, 2026

More advisories for telerik_ui_for_asp_net_ajax

← All verified advisories