Security Advisory

CVE-2026-19219

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-02 10:35:51

Last updated 2026-09-03 03:56:09

Assigner ProgressSoftware

CVSS score 8.1

State PUBLISHED

Description

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to, and uploads into, potentially resulting in remote code execution.

← Browse all CVEs View on cve.org ↗