Telerik UI for ASP.NET AJAX vulnerabilities | LiveThreat CVE Feed

Product

Telerik UI for ASP.NET AJAX

by Progress Software · last CVE Sep 2, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 1High 12Medium 4Low 0

Severity

All severities17 Critical1 High12 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Telerik UI for ASP.NET AJAX to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-6023	9.8	1%	Apr 22	Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2024.4.1114 before 2026.1.421
CVE-2026-19219	8.1	0%	Sep 2	DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.3.812
CVE-2026-13190	8.1	1%	Jul 22	PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.2.708
CVE-2026-13187	8.1	0%	Jul 22	DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.2.708
CVE-2026-13186	8.1	1%	Jul 22	AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2013.1.220 before 2026.2.708
CVE-2026-13185	8.1	1%	Jul 22	PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2013.1.220 before 2026.2.708
CVE-2026-13181	8.1	1%	Jul 22	RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-18672	7.5	1%	Sep 2	RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.3.812
CVE-2026-13189	7.5	0%	Jul 22	SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.2.708
CVE-2026-13184	7.5	0%	Jul 22	RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-13183	7.5	0%	Jul 22	RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-13182	7.5	0%	Jul 22	RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-6022	7.5	0%	Apr 22	Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.1.421
CVE-2026-14932	6.5	0%	Jul 22	Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart Affected: 2009.1.311 before 2026.2.708
CVE-2026-13192	6.5	0%	Jul 22	RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2008.3.1314 before 2026.2.708
CVE-2026-13188	5.9	0%	Jul 22	DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.2.708
CVE-2026-14865	5.3	0%	Jul 22	XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX Affected: 2009.1.314 before 2026.2.708