Skip to content
Threat Feed
Subscribe

Tag

Telerik

3 briefs RSS
critical advisory

Progress Telerik Report Server: Pre-authentication Remote Code Execution (CVE-2024-4358 and CVE-2024-1800)

Progress Telerik Report Server is vulnerable to a pre-authentication remote code execution chain involving authentication bypass (CVE-2024-1800) and insecure deserialization (CVE-2024-4358) via the report management API.

Telerik Report Server +1 telerik rce deserialization cve-2024-4358 cve-2024-1800
1r 2t 2c
critical advisory

Insecure Deserialization Vulnerability in Telerik UI for AJAX RadFilter Control (CVE-2026-6023)

An insecure deserialization vulnerability exists in Progress Telerik UI for AJAX's RadFilter control (versions 2024.4.1114 through 2026.1.421) allowing remote code execution via tampering with the filter state exposed to the client.

cve-2026-6023 telerik deserialization rce webserver
2r 1t 1c
high advisory

Telerik UI for AJAX RadAsyncUpload Uncontrolled Resource Consumption (CVE-2026-6022)

A vulnerability exists in Progress Telerik UI for AJAX prior to 2026.1.421, RadAsyncUpload, due to missing cumulative size enforcement during chunk reassembly, which allows file uploads to exceed the configured maximum size, leading to disk space exhaustion.

cve-2026-6022 telerik resource-exhaustion
2r 1t 1c