https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:24:22.498808+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0977 certfr-2026-avi-0977 — De multiples vulnérabilités ont été découvertes dans Progress Telerik. Certaines d'entre elles permettent à un attaquan… 2026-10-07T18:24:22.545242+00:00 certfr-2026-avi-0977 https://cve.radiocsirt.org/vuln/euvd-2026-339660 EUVD-2026-339660 2026-10-07T18:24:22.545287+00:00 EUVD-2026-339660 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13184 fkie_cve-2026-13184 2026-10-07T18:24:22.545302+00:00

In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.

 https://cve.radiocsirt.org/vuln/ghsa-xj5r-8wvg-3cxf GHSA-xj5r-8wvg-3cxf 2026-10-07T18:24:22.545333+00:00

In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.