Vulnerabilities & PatchesEmerging1 src
Progress Software security advisory (AV26-875)
Serial number: AV26-875 Date: September 2, 2026
As of September 2, 2026, Progress Software is affected by vulnerabilities in the following product:
• Telerik UI for ASP.NET AJAX
• Prior to 2026.3.812
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
• Telerik Web Forms RadImageEditor Path Traversal Vulnerability (CVE-2026-18672)
• Telerik Web Forms DialogHandler UploadPaths Tampering Vulnerability (CVE-2026-19219)
Progress Software security advisory (AV26-875) - Canadian Centre for Cyber Security