Parameter Tampering in Telerik UI for AJAX Products by Progress
CVE-2026-13188

5.9MEDIUM

Key Information:

Vendor

Progress Software
Status
Telerik Ui For Asp.net Ajax
Vendor
CVE Published:
22 July 2026

What is CVE-2026-13188?

A vulnerability exists in Progress Telerik UI for AJAX prior to version 2026.2.708, where the DialogHandler request parameters can be tampered with. This flaw could potentially alter server-side behavior related to dialog boxes, leading to security risks and opportunities for further exploitation when combined with other vulnerabilities.

Affected Version(s)

Telerik UI for ASP.NET AJAX 2011.2.712 < 2026.2.708

References

https://www.telerik.com/products/aspnet-ajax/documentatio...
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcio Almeida of TantoSec
.