CVE-2026-13181

High8.1Published on July 22, 2026

In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments.

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-470

Vendorsprogress

Affected products

Vendors	Product	Versions
progress	telerik ui for asp.net ajax	< 2026.2.708

Vulnerabilities

Public Telerik RadAsyncUpload Exploit Chains Padding Oracle to Unauthenticated RCE

Public Telerik RadAsyncUpload exploit chains AES padding oracle to unauthenticated RCE. Learn affected versions, conditions, CVEs and fix in 2026.2.708.

Sep 7, 202615:126 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Public Telerik RadAsyncUpload Exploit Chains Padding Oracle to Unauthenticated RCE