PatchTheCVEtelerik ui for asp.net ajax vulnerabilities and fixes
Recent CVEs affecting telerik ui for asp.net ajax, with upgrade or downgrade steps. 13 tracked.
Also searched as: telerik ui for asp net ajax, telerik ui for aspnet ajax, telerikuiforasp.netajax.
telerik ui for asp.net ajax has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2026-07-22. Highest priority: CVE-2026-13181 (score 47/100).
- CVE-2026-13181 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeNa
- CVE-2026-13186 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persi
- CVE-2026-13185 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersiste
- CVE-2026-13182 HIGH 7.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish
- CVE-2026-13183 HIGH 7.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cry
- CVE-2026-13187 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with
- CVE-2026-13184 HIGH 7.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and
- CVE-2026-13190 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence uti
- CVE-2026-13189 HIGH 7.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in t
- CVE-2026-14932 MEDIUM 6.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handl
- CVE-2026-14865 MEDIUM 5.3 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-st
- CVE-2026-13192 MEDIUM 6.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the Ra
- CVE-2026-13188 MEDIUM 5.9 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with,
FAQ
How do I fix telerik ui for asp.net ajax vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is telerik ui for asp.net ajax being exploited right now?
None of the tracked telerik ui for asp.net ajax CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which telerik ui for asp.net ajax CVE should I patch first?
CVE-2026-13181 currently ranks highest (47/100): In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeNa.