Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 39

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular expression vulnerabilities in RadSpreadProcessing…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00274 Published 2026-10-28 Fixed in 2026.3.1027 CWE-1333
Priority LOW 39

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00375 Published 2026-10-28 Fixed in 2026.3.1027 CWE-407
Priority LOW 39

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in RadWordsProcessing allow an unauthenticate…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00292 Published 2026-10-28 Fixed in 2026.3.1027 CWE-407
Priority LOW 37

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation all…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00089 Published 2026-10-28 Fixed in 2026.3.1027 CWE-295
Priority LOW 38

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the serve…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00268 Published 2026-10-28 Fixed in 2026.3.1027 CWE-611
Priority LOW 31

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00252 Published 2026-10-28 Fixed in 2026.3.1027 CWE-22