Improper Cryptographic Signature Validation in Telerik Document Processing Libraries

CVE-2026-118040

What is CVE-2026-118040?

A critical issue has been identified in the Telerik Document Processing Libraries prior to version 2026.3.1027, where improper verification of cryptographic signatures and inadequate certificate validation occurs during RadPdfProcessing digital signature validation. This allows unauthenticated attackers to manipulate signature validation processes, potentially leading the system to falsely confirm the legitimacy of forged content and its signing certificate through the use of specially crafted signed PDF documents. Such a flaw undermines the integrity and authenticity of documents processed with these libraries, posing significant security risks.

References