PT-2026-84661
CVE-2026-18672
·
تاريخ النشر
2026-09-02
·
تاريخ التحديث
2026-09-02
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Telerik UI for AJAX versions prior to 2026.3.812
Description
Insufficient validation of client-supplied state in the RadImageEditor control allows an attacker to influence which file is returned by the image cache. This can lead to the exposure of file contents located outside the intended image directories.
Recommendations
Update to version 2026.3.812 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾