{"api_version":"v1","generated_at":"2026-10-09T09:00:00+00:00","product":{"cve_count":19,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-progress-software-telerik-ui-for-asp-net-ajax-0ed3ee5adc81","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Telerik UI for ASP.NET AJAX","next_cursor":null,"observations":[{"affected":"2011.2.712 < 2026.3.812","affected_versions_present":true,"cve_id":"CVE-2026-19219","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-19219","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-03T03:56:09.596Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-875","primary_source":"","published":"2026-09-02T10:35:51.840Z"},{"affected":"2011.2.712 < 2026.3.812","affected_versions_present":true,"cve_id":"CVE-2026-18672","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-18672","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-02T10:42:56.527Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-875","primary_source":"","published":"2026-09-02T10:31:43.100Z"},{"affected":"2009.1.311 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-14932","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-14932","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:09:34.640Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-radchart-hardcoded-key-file-read-cve-2026-14932","primary_source":"","published":"2026-07-22T13:46:45.714Z"},{"affected":"2009.1.314 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-14865","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-14865","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:10:08.695Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rlb-xxe-injection-client-state-cve-2026-14865","primary_source":"","published":"2026-07-22T13:45:21.227Z"},{"affected":"2008.3.1314 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13192","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13192","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:10:33.166Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-radeditor-pdf-export-ssrf-CVE-2026-13192","primary_source":"","published":"2026-07-22T13:44:14.027Z"},{"affected":"2011.2.712 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13190","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13190","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-24T03:56:04.216Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-persistence-framework-unsafe-type-resolution-CVE-2026-13190","primary_source":"","published":"2026-07-22T13:43:12.374Z"},{"affected":"2011.2.712 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13189","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13189","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:11:54.445Z","patch_url":"","primary_source":"","published":"2026-07-22T13:42:19.375Z"},{"affected":"2011.2.712 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13188","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13188","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:12:15.521Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-dialoghandler-parameters-tampering-CVE-2026-13188","primary_source":"","published":"2026-07-22T13:41:29.942Z"},{"affected":"2011.2.712 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13187","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13187","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-24T03:56:03.170Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-dialoghandler-provider-type-tampering-CVE-2026-13187","primary_source":"","published":"2026-07-22T13:40:21.443Z"},{"affected":"2013.1.220 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13186","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13186","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-24T03:56:01.638Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-appdata-path-traversal-deserialization-CVE-2026-13186","primary_source":"","published":"2026-07-22T13:39:14.908Z"},{"affected":"2013.1.220 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13185","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13185","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-24T03:56:00.738Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-persistence-cookie-deserialization-CVE-2026-13185","primary_source":"","published":"2026-07-22T13:38:17.195Z"},{"affected":"2010.1.309 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13184","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13184","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:14:27.027Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rau-unauth-deserialization-chain-cve-2026-13184","primary_source":"","published":"2026-07-22T13:37:11.804Z"},{"affected":"2010.1.309 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13183","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13183","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:15:06.321Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rau-timing-oracle-CVE-2026-13183","primary_source":"","published":"2026-07-22T13:36:08.274Z"},{"affected":"2010.1.309 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13182","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13182","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-22T19:14:47.505Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rau-padding-oracle-cve-2026-13182","primary_source":"","published":"2026-07-22T13:34:57.272Z"},{"affected":"2010.1.309 < 2026.2.708","affected_versions_present":true,"cve_id":"CVE-2026-13181","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13181","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-24T03:55:59.737Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rau-asyncuploadtypename-deserialization-CVE-2026-13181","primary_source":"","published":"2026-07-22T13:33:18.348Z"},{"affected":"2024.4.1114 < 2026.1.421","affected_versions_present":true,"cve_id":"CVE-2026-6023","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6023","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-23T03:56:12.523Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-deserialization-of-untrusted-data-cve-2026-6023","primary_source":"","published":"2026-04-22T07:13:07.933Z"},{"affected":"2011.2.712 < 2026.1.421","affected_versions_present":true,"cve_id":"CVE-2026-6022","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6022","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T12:28:18.218Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-uncontrolled-resource-consumption-cve-2026-6022","primary_source":"","published":"2026-04-22T07:07:30.795Z"},{"affected":"2011.2.712 < 2026.1.225","affected_versions_present":true,"cve_id":"CVE-2026-2878","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-2878","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-27T17:06:16.616Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-insufficient-entropy-cve-2026-2878","primary_source":"","published":"2026-02-25T14:45:11.142Z"},{"affected":"2011.2.712 < 2025.1.416","affected_versions_present":true,"cve_id":"CVE-2025-3600","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-3600","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-08-27T14:54:22.319Z","patch_url":"https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-unsafe-reflection-cve-2025-3600","primary_source":"","published":"2025-05-14T13:21:40.770Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Progress Software"}}