1. Home
  2. CVE Database
  3. CVE-2026-6023
HIGH · 8.1

CVE-2026-6023

In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the cl...

Vulnerability Description

In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client. If an attacker tampers with this state, a server-side remote code execution is possible.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ProgressTelerik Ui For Asp.Net Ajax>= 2024.4.1114, < 2026.1.421

Related Weaknesses (CWE)

CWE-502

References

FAQ

What is CVE-2026-6023?

CVE-2026-6023 is a vulnerability with a CVSS score of 8.1 (HIGH). In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the cl...

How severe is CVE-2026-6023?

CVE-2026-6023 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-6023?

Check the references section above for vendor advisories and patch information. Affected products include: Progress Telerik Ui For Asp.Net Ajax.