CVE-2026-18672 | Progress Telerik UI for ASP.NET AJAX up to 2026.2.708 RadImageEditor path traversal

September 2, 2026 Yanac

A vulnerability was found in Progress Telerik UI for ASP.NET AJAX 2021.1.224/2025.1.416/2026.1.225/2026.1.421/2026.2.708. It has been rated as problematic. This impacts an unknown function of the component RadImageEditor. Performing a manipulation results in path traversal.

This vulnerability is known as CVE-2026-18672. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More