Security Advisory

CVE-2026-13189

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-22 13:42:19

Last updated 2026-07-22 19:11:54

Assigner ProgressSoftware

CVSS score 7.5

State PUBLISHED

Description

In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell check handler may allow an attacker to influence server-side file path resolution and trigger unintended server-side requests.

← Browse all CVEs View on cve.org ↗