Is CVE-2026-13192 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-13192 being exploited in the wild.

How severe is CVE-2026-13192?

Medium severity, with a CVSS score of 6.5, published 22 July 2026.

Which products and versions are affected?

Progress Software Telerik UI for ASP.NET AJAX 2008.3.1314 through 2026.2.519.

Is there a fix for CVE-2026-13192?

A patch was published on 2026-07-22: Fixed in version 2026.2.708 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-13192 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-13192?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-13192: Progress Telerik UI for ASP.NET AJAX SSRF in RadEditor PDF export

CVE-2026-13192 · Severity: medium · CVSS 6.5 · Published 2026-07-22

Telerik UI for ASP.NET AJAX is a suite of components used to build interactive web applications. A security flaw in its document editor's PDF export feature allows logged-in users to force the web server to make unauthorized network connections. This could lead to the theft of sensitive Windows login credentials or allow attackers to probe the company's internal network.

Quick answers

Is CVE-2026-13192 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-13192 being exploited in the wild.
How severe is CVE-2026-13192?: Medium severity, with a CVSS score of 6.5, published 22 July 2026.
Which products and versions are affected?: Progress Software Telerik UI for ASP.NET AJAX 2008.3.1314 through 2026.2.519.
Is there a fix for CVE-2026-13192?: A patch was published on 2026-07-22: Fixed in version 2026.2.708 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-13192 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-13192?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the RadEditor component of Telerik UI for ASP.NET AJAX due to insufficient validation of content during PDF generation. An authenticated attacker can submit malicious content containing specific URL schemes or UNC paths that the server attempts to resolve when exporting to PDF. This allows the attacker to trigger outbound network requests to arbitrary hosts, which can be used for internal network reconnaissance or to capture Windows NTLM authentication credentials via forced SMB connections. The issue is resolved in version 2026.2.708 (2026 Q2 SP1).

Affected products

Progress Software Telerik UI for ASP.NET AJAX 2008.3.1314 through 2026.2.519

Timeline

2026-07-22: advisory: Vendor advisory and CVE published
2026-07-22: patched: Fixed in version 2026.2.708

References

https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-radeditor-pdf-export-ssrf-CVE-2026-13192

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.