EUVD-2026-47689

In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock...

PT-2026-63398

Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description When the Telerik.Upload.ConfigurationHashKey is absent and the machineKey is not explicitly configured, the integrity protection for upload metadata may revert to a predictable defau...