Telerik UI for ASP.NET AJAX vulnerabilities | LiveThreat CVE Feed

Product

Telerik UI for ASP.NET AJAX

by Progress Software · last CVE Sep 2, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 1High 12Medium 5Low 0

Severity

All severities18 Critical1 High12 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Telerik UI for ASP.NET AJAX to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-19219	8.1	0%	Sep 2	DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.3.812
CVE-2026-13190	8.1	1%	Jul 22	PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.2.708
CVE-2026-13187	8.1	0%	Jul 22	DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.2.708
CVE-2026-13186	8.1	1%	Jul 22	AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2013.1.220 before 2026.2.708
CVE-2026-13185	8.1	1%	Jul 22	PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2013.1.220 before 2026.2.708
CVE-2026-13181	8.1	1%	Jul 22	RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-18672	7.5	1%	Sep 2	RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.3.812
CVE-2026-13189	7.5	0%	Jul 22	SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.2.708
CVE-2026-13184	7.5	0%	Jul 22	RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-13183	7.5	0%	Jul 22	RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-13182	7.5	0%	Jul 22	RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2010.1.309 before 2026.2.708
CVE-2026-6022	7.5	0%	Apr 22	Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX Affected: 2011.2.712 before 2026.1.421