CVE-2026-118039

Progress Telerik Document Processing Libraries versions prior to 2026.3.1027 are vulnerable to an XML external entity reference vulnerability in SVG image processing. An unauthenticated attacker can exploit this by providing a crafted SVG image containing a nested embedded SVG. If the library pro...

EUVD-2026-112035

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...

CVE-2026-118039 XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...

CVE-2026-118038

Progress Telerik Document Processing Libraries prior to version 2026.3.1027 are affected by a path traversal vulnerability in the Convert and Merge AI agent tools . An authenticated attacker with low privileges can supply tool arguments containing relative file paths that resolve against the proc...

EUVD-2026-112034

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...

CVE-2026-118038 Path Traversal in Telerik Document Processing Libraries AI Agent Tools

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...

Progress Software Telerik Document Processing Libraries Resource management error vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain a security vulnerability. This vulnerability stems from uncontrolled recursion, infinite loops, lack of loop condition checks, and inefficient regular expressions in RadSpreadProcessing and...

PT-2026-128220

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...

PT-2026-128219

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop condition and inefficient regular expression vulnerabilities in RadSpreadProcessing and RadSpreadStreamProcessing allow an unauthenticated attacker to terminate ...

Progress Software Telerik Document Processing Libraries Resource management error vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain a resource management error vulnerability. This vulnerability stems from uncontrolled recursion, infinite loops, inefficient algorithm complexity, and improper resource allocation in RadPdfProcessing...

CVE-2026-118040: Progress Software Telerik Document Processing Libraries: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of…

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged...

Progress Software Telerik Document Processing Libraries encryption issues vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain an encryption-related vulnerability. This vulnerability stems from improper validation of encrypted signatures and certificates during RadPdfProcessing digital signature verification. Unauthenticated...

PT-2026-128221

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...

PT-2026-128222

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged...

CVE-2026-118036: Progress Software Telerik Document Processing Libraries: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite…

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summarization and question answering allow an unauthenticated...

CVE-2026-118038: Progress Software Telerik Document Processing Libraries: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the…

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...

CVE-2026-118035: Progress Software Telerik Document Processing Libraries: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient…

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity and infinite loop vulnerabilities in RadWordsProcessing allow an unauthenticated attacker to terminate or hang the host process via a crafted DOCX, DOC, RTF...

PT-2026-128218

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summarization and question answering allow an unauthenticated...

Progress Software Telerik Document Processing Libraries path traversal vulnerability

Versions 2026.1.210 through 2026.3.1027 of Progress Software Telerik Document Processing Libraries contain a path traversal vulnerability. This vulnerability stems from path traversal issues in the Convert and Merge AI agent tools. Low-privilege authenticated attackers can exploit this by providi...

Progress Software Telerik Document Processing Libraries input validation error vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain an input validation error vulnerability. This vulnerability stems from XML external entity references in SVG image processing, potentially allowing unauthenticated attackers to read local server files...