https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:45:26.976787+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0977 certfr-2026-avi-0977 — De multiples vulnérabilités ont été découvertes dans Progress Telerik. Certaines d'entre elles permettent à un attaquan… 2026-10-04T17:45:27.033201+00:00 certfr-2026-avi-0977 https://cve.radiocsirt.org/vuln/euvd-2026-339656 EUVD-2026-339656 2026-10-04T17:45:27.033245+00:00 EUVD-2026-339656 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14865 fkie_cve-2026-14865 2026-10-04T17:45:27.033260+00:00

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated denial of service via recursive XML entity expansion.

 https://cve.radiocsirt.org/vuln/ghsa-8qxm-qvqw-xx9r GHSA-8qxm-qvqw-xx9r 2026-10-04T17:45:27.033291+00:00

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthenticated denial of service via recursive XML entity expansion.