What is CVE-2026-13183?

CVE-2026-13183 is a high-severity vulnerability in Progress Software Telerik Ui For Asp.net Ajax, classified under CWE-208. CVSS score: 7.5/10. Published 2026-07-22.

How severe is CVE-2026-13183?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Progress Software Telerik Ui For Asp.net Ajax

CVE-2026-13183

In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing differences, enabling remote attackers to recover protected metadata values.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Progress Software Telerik Ui For Asp.net Ajax — versions 2010.1.309

Weakness classification (CWE)

CWE-208

References

security@progress.com (vendor-advisory)

Frequently asked questions

What is CVE-2026-13183?: CVE-2026-13183 is a high-severity vulnerability in Progress Software Telerik Ui For Asp.net Ajax, classified under CWE-208. CVSS score: 7.5/10. Published 2026-07-22.
How severe is CVE-2026-13183?: High severity. CVSS v3 base score is 7.5 out of 10.