Verified Advisories

CVE-2026-13190 HIGH CVSS 8.1 Verified Advisory Jul 22, 2026

Deserialization Vulnerability in Telerik UI for AJAX (CVE-2026-13190)

In Progress Telerik UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the PersistenceFramework allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote cod...

Fixed in 2026.2.708

RCE Deserialization Progress Software Telerik Ui For Asp Net Ajax

CVE-2026-13185 HIGH CVSS 8.1 Verified Advisory Jul 22, 2026

Telerik UI for AJAX PersistenceFramework Cookie Deserialization Vulnerability (CVE-2026-13185)

In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, allowing unauthenticated remote...

Fixed in 2026.2.708

RCE Deserialization Progress Software Telerik Ui For Asp Net Ajax

CVE-2026-13186 HIGH CVSS 8.1 Verified Advisory Jul 22, 2026

Path Traversal and Deserialization in Telerik UI for AJAX (CVE-2026-13186)

A path traversal vulnerability in the file-based persistence storage provider of Progress Telerik UI for AJAX allows an attacker to influence which file is loaded as persistence state when the storage key is derived f...

Fixed in 2026.2.708

RCE Path Traversal Deserialization Progress Software

CVE-2026-13182 HIGH CVSS 7.5 Verified Advisory Jul 22, 2026

RadAsyncUpload Padding Oracle Vulnerability in Telerik UI for AJAX (CVE-2026-13182)

In Progress Telerik UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that reveals protected metadata values...

Fixed in 2026.2.708

Information Disclosure Oracle Progress Software Telerik Ui For Asp Net Ajax