Paper/Archive/CVE-2026-6023

CVE-2026-6023

Progress Software Telerik UI for ASP.NET AJAX — Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 45.3.453 × 209.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client. If an attacker tampers with this state, a server-side remote code execution is possible.

Affected

ProductAffectedFixed inSource

Telerik UI for ASP.NET AJAX2024.4.1114 – < 2026.1.4212026.1.421CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ProgressSoftware (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorytelerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-deserialization-of-untrusted-data-cve-2026-6023