Telerik UI for ASP.NET MVC vulnerabilities

2 known vulnerabilities in Telerik UI for ASP.NET MVC from Progress Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Telerik UI for ASP.NET MVC: Uncaught Exception

  CVE-2026-106146Nov 12, 2026Progress Software

  In Progress® Telerik® UI for ASP.NET MVC versions `2012.2.710` through `2026.3.1015`, server-side filter processing does not properly validate descriptor types, null values, or stack state in FilterNodeVisitor and does not catch FilterParserException within th

• 8.6 High severity

  Telerik UI for ASP.NET MVC: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-106137Nov 11, 2026Progress Software

  In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain