What is CVE-2026-13187?

CVE-2026-13187 is a high-severity vulnerability in Progress Software Telerik Ui For Asp.net Ajax, classified under Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection). CVSS score: 8.1/10. Published 2026-07-22.

How severe is CVE-2026-13187?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Progress Software Telerik Ui For Asp.net Ajax

CVE-2026-13187

In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, potentially altering dialog processing and enabling chained exploitation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Progress Software Telerik Ui For Asp.net Ajax — versions 2011.2.712

Weakness classification (CWE)

CWE-470 — Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection)

References

security@progress.com (vendor-advisory)

Frequently asked questions

What is CVE-2026-13187?: CVE-2026-13187 is a high-severity vulnerability in Progress Software Telerik Ui For Asp.net Ajax, classified under Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection). CVSS score: 8.1/10. Published 2026-07-22.
How severe is CVE-2026-13187?: High severity. CVSS v3 base score is 8.1 out of 10.