CVE-2026-13181

RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments.

Affected

Progress Software · Telerik UI for ASP.NET AJAX

CVSS v3.1 PROGRESS

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.74% chance of exploitation in the next 30 days, 54th percentile

Published

2026-07-22

Updated

2026-07-24

Proof-of-concept exploits (1)

• ivanesk315/CVE-2026-13181-Telerik0★ · 2026-09-10

Security advisories

• https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rau…

References

• CVE Record
• NVD entry

Related

• CVE-2020-13671
• CVE-2023-25157
• CVE-2026-18963
• CVE-2026-20253
• CVE-2026-27604
• CVE-2026-28496