CVE-2026-13190: Deserialization of Untrusted Data

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution...

PT-2026-63404

Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description A deserialization issue in the persistence utilities allows unsafe type instantiation from an attacker-influenced persisted state, which can lead to remote code execution...