CyberRota Analysis
AI-GeneratedThe vulnerability in Progress® Telerik® UI for AJAX prior to version 2026.2.708 allows for unsafe type instantiation due to a deserialization flaw in the persistence utilities, potentially enabling remote code execution by attackers. Organizations using affected versions of this software should prioritize patching to mitigate the risk of exploitation. This is especially critical for applications that handle sensitive data or operate in untrusted environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)