AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Progress SoftwareCVE-2026-18672

Progress Software Telerik UI for ASP.NET AJAX: path traversal

Progress Software

CVE-2026-18672 · Published Sep 2, 2026 · updated Sep 8, 2026

High7.5
Fix: upgrade to 2026.3.812 or later
Progress Software advisory

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories.

Affected versions

PackageAffectedFixed in
Telerik UI for ASP.NET AJAX
Product
>= 2011.2.712, < 2026.3.8122026.3.812
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More Progress Software advisories

All Progress Software
Critical 10.0Sep 11Progress Software Chef Automate: missing authenticationCVE-2026-80462fixed in 4.13.520High 8.1Sep 2Progress Software Telerik UI for ASP.NET AJAX: remote code executionCVE-2026-19219fixed in 2026.3.812High 7.2Aug 17Progress Software ShareFile Storage Zones Controller: path traversalCVE-2026-16137no fix yetHigh 8.0Aug 17Progress Software ShareFile Storage Zones Controller: unsafe deserializationCVE-2026-16138no fix yetHigh 7.2Aug 17Progress Software ShareFile Storage Zones Controller: remote code executionCVE-2026-16139no fix yetCritical 9.8Aug 12Progress Software WhatsUp Gold: remote code executionCVE-2026-65941fixed in 26.0.2