Medium severity6.5NVD Advisory· Published Jul 22, 2026· Updated Aug 6, 2026
CVE-2026-13192
CVE-2026-13192
Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of Windows authentication credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:*:*:*:*:*:*:*:*Range: >=2008.31314,<2026.2.708
- Range: <2026.2.708
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.