In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potentially altering dialog server-side behavior and enabling chained exploitation.
| Vendor | Product | Versions |
|---|---|---|
| progress | telerik ui for asp.net ajax | 2011.2.712 |
Updated severity from MEDIUM to CRITICAL, adjusted CVSS to 9.0, extended affected versions to include 2026.2.707, and added CWE-20 (improper input validation) based on article classification.
Initial creation
