Telerik UI for ASP.NET AJAX vulnerabilities | LiveThreat CVE Feed

Product

Telerik UI for ASP.NET AJAX

by Progress · last CVE Jul 22, 2026

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 5High 11Medium 5Low 0

Severity

All severities22 Critical5 High11 Medium5 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Telerik UI for ASP.NET AJAX to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-13190	8.1	1%	Jul 22	PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2712 before 2026.2.708
CVE-2026-13187	8.1	0%	Jul 22	DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2712 before 2026.2.708
CVE-2026-13186	8.1	1%	Jul 22	AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2013.1.220 before 2026.2.708
CVE-2026-13185	8.1	1%	Jul 22	PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2013.1.220 before 2026.2.708
CVE-2026-13181	8.1	1%	Jul 22	RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1309 before 2026.2.708
CVE-2026-13189	7.5	0%	Jul 22	SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2712 before 2026.2.708
CVE-2026-13184	7.5	0%	Jul 22	RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1309 before 2026.2.708
CVE-2026-13183	7.5	0%	Jul 22	RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1309 before 2026.2.708
CVE-2026-13182	7.5	0%	Jul 22	RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1309 before 2026.2.708
CVE-2026-6022	7.5	0%	Apr 22	Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX Affected: before 2026.1.421
CVE-2025-3600	7.5	26%	May 14	In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the… Affected: 2011.2712 through 2025.1.218