CVE-2026-6022 — Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX

CVE-2026-6022

Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX PUBLISHED

Description (CNA)

In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly, leading to disk space exhaustion.

Affected (CNA)

Vendor / product	Versions
Progress Software / Telerik UI for ASP.NET AJAX	affected 2011.2.712 before 2026.1.421

CWE

CWE-400

References

https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-uncontrolled-resource-consumption-cve-2026-6022

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.