CVE-2026-13192 — MEDIUM (6.5)

Q: How severe is CVE-2026-13192?

CVE-2026-13192 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-13192?

Check the references section above for vendor advisories and patch information. Affected products include: Progress Telerik Ui For Asp.Net Ajax.

Vulnerability Description

In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of Windows authentication credentials.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Progress	Telerik Ui For Asp.Net Ajax	>= 2008.31314, < 2026.2.708

Related Weaknesses (CWE)

CWE-918

References

https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-secVendor AdvisoryMitigation

FAQ

What is CVE-2026-13192?

CVE-2026-13192 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requ...

How severe is CVE-2026-13192?

CVE-2026-13192 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-13192?

Check the references section above for vendor advisories and patch information. Affected products include: Progress Telerik Ui For Asp.Net Ajax.