Known vulnerabilities in UI for AJAX 2026.2.519

Vendor: Progress Telerik
Software: UI for AJAX
Version: 2026.2.519
Software CPE: cpe:2.3:a:progress:ui_for_ajax:*:*:*:*:*:*:*:*
Website: https://www.telerik.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting UI for AJAX version 2026.2.519 UI for AJAX 2026.2.519 is affected by 7 vulnerabilities: 4 high, 3 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139978 - Deserialization of Untrusted Data
CVE-2026-13190		 CWE-502 High
No
No
 2026.2.708 29.07.2026 SB2026072932
SB2026072933
#VU139977 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-13186		 CWE-22 High
No
No
 2026.2.708 29.07.2026 SB2026072932
SB2026072933
#VU139976 - Deserialization of Untrusted Data
CVE-2026-13185		 CWE-502 High
No
No
 2026.2.708 29.07.2026 SB2026072932
SB2026072933
#VU139975 - Use of Hard-coded Cryptographic Key
CVE-2026-13184		 CWE-321 Medium
No
No
 2026.2.708 29.07.2026 SB2026072932
SB2026072933
#VU139973 - Information Exposure Through Timing Discrepancy
CVE-2026-13183		 CWE-208 Medium
No
No
 2026.2.708 29.07.2026 SB2026072932
SB2026072933
#VU139960 - Information Exposure Through an Error Message
CVE-2026-13182		 CWE-209 Medium
No
No
 2026.2.708 29.07.2026 SB2026072932
SB2026072933
#VU139957 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-13181		 CWE-470 High
No
No
 2026.2.708 29.07.2026 SB2026072932
SB2026072933