Skip to content
COOEY

FAIL › dossier

Telerik UI for ASP.NET AJAX

PRODUCT

· dossier confidence 20%

Telerik UI for ASP.NET AJAX is a .NET UI component library with a severe security track record of critical remote code execution and path traversal vulnerabilities. Multiple CVEs have been actively exploited, including those added to CISA's KEV catalog, indicating systemic weaknesses in secure development and patching practices.

Failure events
2
Zero-days
0
RCEs
1
On KEV
1
Critical
2
Worst shame
72
PROFILE
CategorySoftware ComponentWhat they doTelerik UI for ASP.NET AJAX is a .NET UI component library for building web applications. Websitehttps://www.telerik.com ↗
SECURITY POSTURE

Telerik has a poor security track record with multiple critical remote code execution and path traversal vulnerabilities in its UI for ASP.NET AJAX product, some actively exploited and cataloged by CISA.

Notable failures
  • CVE-2019-18935 RCE
  • CVE-2017-11357 RCE
  • CVE-2026-18672 Path Traversal
Patterns: repeated unpatched deserialization and path traversal vulnerabilities; critical RCEs actively exploited in ransomware attacks
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2021-11-03 CVE-2019-18935 critical A deserialization vulnerability in Progress Telerik UI for ASP.NET AJAX allowed for remote code execution, and is actively being exploited in ransomware attacks.
2017-08-23 CVE-2017-11357 critical CVE-2017-11357: Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restri
DOSSIER SOURCES
Open questions: Telerik's current patching process for UI for ASP.NET AJAX · Telerik's current security posture for other products
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-04 03:50:28.467915+00:00