Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Progress Software Telerik UI for ASP.NET AJAX 2026.1.421 Clear all filters
TI-2026-05284 CVE-2026-6023 · GHSA-mcrv-gh25-252c

Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX

Priority MEDIUM 44

In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0054 Published 2026-04-22 Fixed in 2026.1.421 CWE-502
TI-2026-05283 CVE-2026-6022 · GHSA-vf2r-6g4x-jc4h

Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX

Priority LOW 39

In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00288 Published 2026-04-22 Fixed in 2026.1.421 CWE-400