What is CVE-2026-13190?
A deserialization vulnerability exists in Progress Telerik UI for AJAX's persistence utilities, allowing unsafe type instantiation from attacker-influenced persisted state. This can lead to remote code execution (RCE) in versions prior to v2026.2.708. Immediate upgrade is strongly recommended.
Azərbaycanca: Progress Telerik UI for AJAX-da, `persistence utilities` vasitəsilə deserializasiya zəifliyi aşkar edilib. Bu, təcavüzkara təsir edilmiş saxlanılan vəziyyətdən (`attacker-influenced persisted state`) istifadə edərək təhlükəli tip nümunəsi yaratmağa imkan verir ki, bu da uzaqdan kod icrasına (RCE) səbəb ola bilər. 2026.2.708 versiyasından əvvəlki bütün versiyalar təsirlənir, dərhal yenilənmə tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-502; shared vendors: Progress, Telerik
FAQ2
Which product is affected by CVE-2026-13190?
This vulnerability affects Progress Telerik UI for AJAX, specifically its persistence utilities component.
Which versions are affected by CVE-2026-13190?
All versions prior to v2026.2.708 are affected by this vulnerability.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.