# Progress Software Telerik UI for ASP.NET AJAX.

Every CVE that names Progress Software Telerik UI for ASP.NET AJAX among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-19219.md)
  `CVE-2026-19219` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Unrestricted file upload, CWE-345
- [RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-18672.md)
  `CVE-2026-18672` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2026 · Tags: Path traversal
- [Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart](https://agentprime.io/advisories/CVE-2026-14932.md)
  `CVE-2026-14932` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 6.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Hard-coded credentials
- [XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-14865.md)
  `CVE-2026-14865` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 5.3 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Denial of service
- [RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13192.md)
  `CVE-2026-13192` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 6.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13190.md)
  `CVE-2026-13190` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: Insecure deserialization
- [SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13189.md)
  `CVE-2026-13189` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: Path traversal
- [DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13188.md)
  `CVE-2026-13188` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 5.9 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-345
- [DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13187.md)
  `CVE-2026-13187` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: Code injection
- [AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13186.md)
  `CVE-2026-13186` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: Path traversal
- [PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13185.md)
  `CVE-2026-13185` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: Insecure deserialization
- [RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13184.md)
  `CVE-2026-13184` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: Hard-coded credentials
- [RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13183.md)
  `CVE-2026-13183` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-208
- [RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13182.md)
  `CVE-2026-13182` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2026 · Tags: Information disclosure
- [RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13181.md)
  `CVE-2026-13181` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: Code injection
- [Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-6023.md)
  `CVE-2026-6023` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2026 · Tags: Insecure deserialization
- [Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-6022.md)
  `CVE-2026-6022` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service
- [Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-2878.md)
  `CVE-2026-2878` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 5.3 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-331
- [Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2025-3600.md)
  `CVE-2025-3600` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.26 · Not analysed yet · Published 14 May 2025 · Tags: Code injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=progress-software-telerik-ui-for-asp-net-ajax>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/progress-software-telerik-ui-for-asp-net-ajax/>. Everything for agents: <https://agentprime.io/llms.txt>.