High severity7.5NVD Advisory· Published Oct 28, 2026

CVE-2026-118035

Description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in RadWordsProcessing allow an unauthenticated attacker to terminate or hang the host process via a crafted DOCX, DOC, RTF or HTML document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Telerik Document Processing Librariesllm-fuzzy
Range: <2026.3.1027

Patches

Vulnerability mechanics

References

docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-uncontrolled-resource-consumption-wordsprocessing-cve-2026-118035nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000