CVE-2026-13190
Awaiting Analysis Awaiting Analysis - Queue

Deserialization Flaw in Telerik UI for AJAX

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: Progress Software Corporation

Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-22
Last Modified
2026-07-22
Generated
2026-07-22
AI Q&A
2026-07-22
EPSS Evaluated
N/A
NVD
CVE-2026-13190
EUVD
EUVD-2026-47696

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
progress telerik_ui_for_ajax to 2026.2.708 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Progress Telerik UI for AJAX versions before v2026.2.708. It involves a deserialization flaw in the persistence utilities that allows unsafe type instantiation from attacker-controlled persisted state, potentially leading to remote code execution.

Detection Guidance

Check the version of Progress Telerik UI for AJAX. If it is prior to v2026.2.708, the system is vulnerable. Use commands like 'find / -name Telerik.Web.UI.dll' to locate the library and verify its version.

Impact Analysis

An attacker could exploit this to execute arbitrary code on your system, potentially gaining full control over affected applications or servers. This could lead to data breaches, system compromise, or further network infiltration.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties or fines.

Mitigation Strategies

Upgrade Progress Telerik UI for AJAX to v2026.2.708 or later immediately. Disable persistence utilities if not required. Apply network-level protections to block exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13190. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart