High severity8.1NVD Advisory· Published Jul 22, 2026· Updated Aug 6, 2026
CVE-2026-13186
CVE-2026-13186
Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is derived from user-controlled input, enabling attacker-controlled deserialization and remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:*:*:*:*:*:*:*:*Range: >=2013.1.220,<2026.2.708
- Range: <2026.2.708
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.