CVE-2026-13183 | BDVDB-2026-351671 Detail
Progress SoftwareTelerik UI for ASP.NET AJAX
Description#
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing differences, enabling remote attackers to recover protected metadata values.
Impact#
CAPEC-385 Covert Timing Channel
Weaknesses#
- CWE-208 Observable Timing Discrepancy
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.