CVE-2026-13192
MEDIUMRadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX
Title source: cnaDescription
In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of Windows authentication credentials.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-radeditor-pdf-export-ssrf-CVE-2026-13192
Scores
CVSS v3
6.5
EPSS
0.0024
EPSS Percentile
15.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-918
Status
published
Products (1)
Progress Software/Telerik UI for ASP.NET AJAX
2008.3.1314 - 2026.2.708
Published
Jul 22, 2026
Tracked Since
Jul 22, 2026