Uncontrolled Resource Consumption in Telerik Document Processing Libraries
CVE-2026-118035

7.5HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Document Processing Libraries
Vendor: CVE Published:; 28 October 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-118035?

The Telerik Document Processing Libraries prior to version 2026.3.1027 are susceptible to vulnerabilities that may lead to uncontrolled recursion, inefficient algorithmic complexities, and infinite loops. This allows unauthenticated attackers to craft malicious DOCX, DOC, RTF, or HTML documents capable of causing the host process to become unresponsive or terminate unexpectedly. It is crucial for users to upgrade to the latest versions to mitigate these risks and ensure the security of their applications.

Affected Version(s)

Telerik Document Processing Libraries 0 < 2026.3.1027

References

https://docs.telerik.com/devtools/document-processing/kno...

vendor-advisory

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 28, 2026
Vulnerability Reserved
Oct 27, 2026

CVE-2026-118035 Data

JSON