Unrated severityNVD Advisory· Published Jul 22, 2026· Updated Jul 22, 2026
Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart
CVE-2026-14932
Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory.
Affected products
1- Range: <2026.2.708
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.