Progress Software Telerik UI for ASP.NET AJAX

Name: Progress Software Telerik UI for ASP.NET AJAX
Brand: Progress Software

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

1critical0high1medium0low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-13181US	—	0.73% (54th)	Exploit	2026.2.708	2026-07-22	2010.1.309 → 2026.2.708
CVE-2025-3600US	—	26.3% (98th)	—	2025.1.416	2025-05-14	2011.2.712 → 2025.1.416
CVE-2026-13186US	—	0.73% (54th)	—	2026.2.708	2026-07-22	2013.1.220 → 2026.2.708
CVE-2026-13185US	—	0.67% (52nd)	—	2026.2.708	2026-07-22	2013.1.220 → 2026.2.708
CVE-2026-6023US	critical9.8	0.54% (45th)	—	2026.1.421	2026-04-22	2024.4.1114 → 2026.1.421
CVE-2026-13190US	—	0.50% (43rd)	—	2026.2.708	2026-07-22	2011.2.712 → 2026.2.708
CVE-2026-13183US	—	0.50% (42nd)	—	2026.2.708	2026-07-22	2010.1.309 → 2026.2.708
CVE-2026-13182US	—	0.50% (42nd)	—	2026.2.708	2026-07-22	2010.1.309 → 2026.2.708
CVE-2026-14865US	—	0.43% (37th)	—	2026.2.708	2026-07-22	2009.1.314 → 2026.2.708
CVE-2026-13192US	—	0.42% (36th)	—	2026.2.708	2026-07-22	2008.3.1314 → 2026.2.708
CVE-2026-13189US	—	0.36% (30th)	—	2026.2.708	2026-07-22	2011.2.712 → 2026.2.708
CVE-2026-14932US	—OT elevated	0.35% (29th)	—	2026.2.708	2026-07-22	2009.1.311 → 2026.2.708
CVE-2026-13187US	—	0.34% (27th)	—	2026.2.708	2026-07-22	2011.2.712 → 2026.2.708
CVE-2026-13184US	—OT elevated	0.31% (23rd)	—	2026.2.708	2026-07-22	2010.1.309 → 2026.2.708
CVE-2026-6022US	—	0.29% (21st)	—	2026.1.421	2026-04-22	2011.2.712 → 2026.1.421
CVE-2026-2878US	medium5.9	0.21% (11th)	—	2026.1.225	2026-02-25	2011.2.712 → 2026.1.225
CVE-2026-13188US	—OT elevated	0.16% (5th)	—	2026.2.708	2026-07-22	2011.2.712 → 2026.2.708

The flaw types (CWEs) most of these CVEs share.

CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-321Use of Hard-coded Cryptographic Key2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-208Observable Timing Discrepancy1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-331Insufficient Entropy1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.