Uncontrolled Resource Consumption in Telerik Document Processing Libraries
CVE-2026-118037

7.5HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Document Processing Libraries
Vendor: CVE Published:; 28 October 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-118037?

The Telerik Document Processing Libraries are susceptible to vulnerabilities that allow unauthenticated attackers to exploit uncontrolled recursion, infinite loops, and inefficient regular expressions. These weaknesses can cause the host process to terminate or hang when processing crafted XLSX or XLS workbooks or formulas. It is crucial for users of the affected libraries to upgrade to version 2026.3.1027 or later to mitigate these risks.

Affected Version(s)

Telerik Document Processing Libraries 0 < 2026.3.1027

References

https://docs.telerik.com/devtools/document-processing/kno...

vendor-advisory

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 28, 2026
Vulnerability Reserved
Oct 27, 2026

CVE-2026-118037 Data

JSON