CyberRota Analysis
AI-GeneratedTelerik UI for AJAX versions prior to 2026.2.708 are vulnerable to remote code execution due to improper handling of forged upload metadata, which can manipulate the AsyncUploadTypeName processing. This flaw allows attackers to execute arbitrary code on affected systems, posing a significant risk to application integrity and security. Organizations using this component should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments.
Related CVEs
Other vulnerabilities affecting the same vendor(s)