Telerik UI for ASP.NET AJAX 2009.1.311 < 2026.2.708 RadChart ChartImage.axd File Read

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2009.1.311 or later and prior to 2026.2.708. It is, therefore, affected by an information disclosure vulnerability. The obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated...

CVE-2026-14932

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory...

CVE-2026-14932 Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory...

EUVD-2026-47699

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory...

CVE-2026-14932

In Progress Telerik UI for AJAX, prior to version 2026.2.708, the obsolete RadChart component’s ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files in the application directory. The impact is exposure and potential removal of image assets. This ...

CVE-2026-14932

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory...

CVE-2026-14932 Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory...

PT-2026-63407

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory...

CVE-2026-14932: Use of Hard-coded Cryptographic Key

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory...

EUVD-2019-9389

Malware in sbrugna...

CVE-2019-19790

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart...

Telerik UI for ASP.NET AJAX RadChart Path Traversal Vulnerability

Telerik UI for ASP.NET AJAX is an HTML editor. RadChart is one of the charting components. A path traversal vulnerability exists in RadChart in Telerik UI for ASP.NET AJAX. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a...

CVE-2019-19790

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart...

Path traversal

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart...

CVE-2019-19790

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart...

CVE-2019-19790

CVE-2019-19790 affects Telerik UI for ASP.NET AJAX RadChart. The vulnerability is a path traversal in RadChart that allows a remote attacker to read and delete image files with extensions .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server via a specially crafted request. Root cau...

PT-2019-15960 · Telerik · Telerik Ui For Asp.Net Ajax

Name of the Vulnerable Software and Affected Versions: Telerik UI for ASP.NET AJAX versions all versions of RadChart Description: The issue allows a remote attacker to read and delete specific image files on the server through a specially crafted request, exploiting path traversal in RadChart. Th...

CVE-2019-19790: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafted request. NOTE: RadChart was discontinued in 2014 in favor of RadHtmlChart...