PT-2026-63401

CVE-2026-13187

·

Published

2026-07-22

·

Updated

2026-08-06

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708
Description Input provided to the DialogHandler provider type can be tampered with, which may allow an attacker to alter how dialogs are processed and potentially enable chained exploitation.
Recommendations Update Telerik UI for AJAX to version 2026.2.708 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\'Unsafe Reflection\')
Related identifiers
CVE-2026-13187
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com