Progress Software security advisory (AV26-875)
Brief
Serial number: AV26-875 Date: September 2, 2026
As of September 2, 2026, Progress Software is affected by vulnerabilities in the following product:
- Telerik UI for ASP.NET AJAX
- Prior to 2026.3.812
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- Telerik Web Forms RadImageEditor Path Traversal Vulnerability (CVE-2026-18672)
- Telerik Web Forms DialogHandler UploadPaths Tampering Vulnerability (CVE-2026-19219)
Progress Software security advisory (AV26-875) - Canadian Centre for Cyber Security