CVE-2026-13184 in Telerik UI for ASP.NET AJAX
الملخص
بحسب MITRE • 22/07/2026
In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.