https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T01:47:30.125819+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-0977 certfr-2026-avi-0977 — De multiples vulnérabilités ont été découvertes dans Progress Telerik. Certaines d'entre elles permettent à un attaquan… 2026-09-29T01:47:30.143568+00:00 certfr-2026-avi-0977 https://db.gcve.eu/vuln/fkie_cve-2026-13184 fkie_cve-2026-13184 2026-09-29T01:47:30.143614+00:00

In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.

 https://db.gcve.eu/vuln/ghsa-xj5r-8wvg-3cxf GHSA-xj5r-8wvg-3cxf 2026-09-29T01:47:30.143647+00:00

In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.