https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:47:33 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-0977 certfr-2026-avi-0977 https://db.gcve.eu/vuln/certfr-2026-avi-0977 https://db.gcve.eu/vuln/fkie_cve-2026-13184 <p>In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.</p> <p>In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.</p> https://db.gcve.eu/vuln/fkie_cve-2026-13184 https://db.gcve.eu/vuln/ghsa-xj5r-8wvg-3cxf <p>In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.</p> <p>In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains.</p> https://db.gcve.eu/vuln/ghsa-xj5r-8wvg-3cxf