Tag
critical
advisory
Insecure Deserialization Vulnerability in Telerik UI for AJAX RadFilter Control (CVE-2026-6023)
2 rules 1 TTP 1 CVEAn insecure deserialization vulnerability exists in Progress Telerik UI for AJAX's RadFilter control (versions 2024.4.1114 through 2026.1.421) allowing remote code execution via tampering with the filter state exposed to the client.
cve-2026-6023
telerik
deserialization
rce
webserver
2r
1t
1c
high
advisory
Telerik UI for AJAX RadAsyncUpload Uncontrolled Resource Consumption (CVE-2026-6022)
2 rules 1 TTP 1 CVEA vulnerability exists in Progress Telerik UI for AJAX prior to 2026.1.421, RadAsyncUpload, due to missing cumulative size enforcement during chunk reassembly, which allows file uploads to exceed the configured maximum size, leading to disk space exhaustion.
cve-2026-6022
telerik
resource-exhaustion
2r
1t
1c