CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the file-based persistence storage provider of Progress® Telerik® UI for AJAX versions prior to 2026.2.708, allowing attackers to exploit user-controlled input to perform deserialization attacks that can lead to remote code execution. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is derived from user-controlled input, enabling attacker-controlled deserialization and remote code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)