CVE-2026-13192 in Telerik UI for ASP.NET AJAXinformación

Resumen

por MITRE • 2026-07-22

In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of Windows authentication credentials.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

ProgressSoftware

Reservar

2026-06-24

Divulgación

2026-07-22

Moderación

aceptado

Artículo

VDB-382346

CPE

listo

EPSS

0.00244

KEV

no

Actividades

muy bajo

Fuentes

Do you know our Splunk app?

Download it now for free!