CVE-2026-106146

Vendor

Progress Software

Product

Telerik UI for ASP.NET MVC

CVSS v3.1

8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness

CWE-248

Exposure class

Developer platform, File transfer

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 48
   CVE NVD 2h ago

   In Progress® Telerik® UI for ASP.NET MVC versions `2012.2.710` through `2026.3.1015`, server-side filter processing does not properly validate…

   In Progress® Telerik® UI for ASP.NET MVC versions `2012.2.710` through `2026.3.1015`, server-side filter processing does not properly validate descriptor types, null values, or stack state in FilterNodeVisitor and does not catch…

   CVSS 8.6 Fix available CVE-2026-106146 Progress Software