EUVD-2026-24632
GHSA-mcrv-gh25-252c
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
7DescriptionCVE.org
In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client. If an attacker tampers with this state, a server-side remote code execution is possible.
AnalysisAI
Remote code execution in Progress Telerik UI for ASP.NET AJAX via insecure deserialization in the RadFilter control allows unauthenticated remote attackers to execute arbitrary code on the server by tampering with exposed client-side filter state. Affected versions span 2024.4.1114 through 2026.1.421. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the vulnerable RadFilter control is configured to expose filter state to the client rather than storing it server-side only. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk requires careful assessment of multiple signals. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker scans public-facing ASP.NET applications to identify those using Progress Telerik UI for AJAX with the RadFilter control enabled. Using browser developer tools, the attacker inspects HTTP responses and identifies the serialized RadFilter state embedded in ViewState or a hidden form field. … |
| Remediation | Upgrade to Progress Telerik UI for ASP.NET AJAX version 2026.2.513 or later, which addresses the deserialization vulnerability in RadFilter state handling per vendor advisory available at https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-deserialization-of-untrusted-data-cve-2026-6023. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running Progress Telerik UI for ASP.NET AJAX and identify which are running affected versions 2024.4.1114-2026.1.421; disable or restrict network access to RadFilter controls if possible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today