SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-14932

MEDIUM · CVSS 6.5 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-07-22 · Last synced 2026-08-21

CyberRota Analysis

AI-Generated

The obsolete RadChart component in Progress® Telerik® UI for AJAX versions prior to v2026.2.708 is susceptible to unauthenticated file read and deletion of image files via the ChartImage.axd handler. This vulnerability could allow attackers to access sensitive files or disrupt application functionality by deleting critical resources. Organizations using affected versions of Telerik UI should prioritize remediation to mitigate potential data exposure and operational impact.

CVE
CVE-2026-14932
Severity
MEDIUM
CVSS
6.5
EPSS
0.21%

Original NVD Description

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory.

Related CVEs

Other vulnerabilities affecting the same vendor(s)