CVE-2026-13187
High · 8.1CVSS
8.1
EPSS
0.3%
Published
Jul 22, 2026
CISA due date
—
The record
In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, potentially altering dialog processing and enabling chained exploitation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119578 MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg… CWE-470
- CVE-2026-108097 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CWE-470
- CVE-2026-108099 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')… CWE-470
- CVE-2026-119050 Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that… CWE-470
- CVE-2026-116692 MLflow is an open source AI engineering platform for agents, large language models, and… CWE-470
- CVE-2026-115931 Postiz lets a signed-in user ask the backend to run a function on one of their connected… CWE-470
- CVE-2026-115886 MLflow is an open source AI engineering platform for agents, large language models, and… CWE-470
- CVE-2026-115749 hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an… CWE-470