CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
Affected products
telerik: ui for asp.net ajax
References9
- www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/detai… MitigationVendor Advisory
- www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/detai… MitigationVendor Advisory
- packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-Ra… ExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/43874/ ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/159653/Telerik-UI-ASP.NET-AJAX-Ra… ExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/43874/ ExploitThird Party AdvisoryVDB Entry
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006 Third Party Advisory
- psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0006 Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=… US Government Resource
Metrics
- CVSS 3.1
-
9.8
CRITICAL
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 84% percentile: 100 · as of 2 November 2026
- CWE
- CWE-326
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.