CVE-2026-18672 — RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX

CVE-2026-18672

RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX PUBLISHED

Description (CNA)

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories.

Affected (CNA)

Vendor / product	Versions
Progress Software / Telerik UI for ASP.NET AJAX	affected 2011.2.712 before 2026.3.812

CWE

CWE-22

References

https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rie-path-traversal-cve-2026-18672

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.