PT-2026-63403
CVE-2026-13189
·
Published
2026-07-22
·
Updated
2026-08-06
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Telerik UI for AJAX versions prior to 2026.2.708
Description
Insufficient validation of the
language parameter in the spell check handler allows an attacker to influence server-side file path resolution. This can lead to the triggering of unintended server-side requests.Recommendations
Update to version 2026.2.708 or later.
Restrict use of the
language parameter in the spell check handler until the update is applied. Found an issue in the description? Have something to add? Feel free to write us 👾