Telerik UI for ASP.NET Core vulnerabilities

2 known vulnerabilities in Telerik UI for ASP.NET Core from Progress Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Telerik UI for ASP.NET Core: Uncontrolled Recursion

  CVE-2026-106154Nov 12, 2026Progress Software

  In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.1015`, the server-side FilterParser processes nested expressions in untrusted filter parameters through recursive parsing without a recursion-depth limit, while FilterLexer does no

• 8.6 High severity

  Telerik UI for ASP.NET Core: Uncontrolled Resource Consumption

  CVE-2026-106156Nov 11, 2026Progress Software

  In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation requests, with or without grouping, cause dynamic assemblies and load contexts to be retained, resulting in accumulating process memory consu