Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Progress Software Telerik UI for ASP.NET AJAX 2026.3.812 Clear all filters
TI-2026-15691 CVE-2026-19219 · GHSA-82ph-hv94-946r

DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

Priority LOW 37

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encrypt…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00236 Published 2026-09-02 Fixed in 2026.3.812 CWE-345
TI-2026-15299 CVE-2026-18672 · GHSA-4j6f-v242-c6x4

RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX

Priority LOW 39

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potential…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-09-02 Fixed in 2026.3.812 CWE-22