High severity · published Apr 22, 2026
CVE-2026-6022
Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly, leading to disk space exhaustion.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TU
Telerik UI for ASP.NET AJAX · Progress Software
2011.2.712 before 2026.1.421 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-6022
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-6022
Mitigation
https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-uncontrolled-resource-consumption-cve-2026-6022
More from Telerik UI for ASP.NET AJAX
9.8
CVE-2026-6023
Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX
8.1
CVE-2026-19219
DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
8.1
CVE-2026-13190
PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
8.1
CVE-2026-13187
DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX
8.1
CVE-2026-13186
AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX