VulnSocial

CVE-2026-6022Disclosure(progress / telerik_ui_for_asp.net_ajax)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly, leading to disk space exhaustion.

progress CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • telerik_ui_for_asp.net_ajax

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-04-23); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
progress
Products
telerik_ui_for_asp.net_ajax

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-23: 1Mentions · 2026-05-19: 1Technical Details · 2026-04-23: 104-2305-19
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-231
Disclosure1
2026-05-191
General1
Full discourse2 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos Progress ❗ CVE-2026-6023 ❗ CVE-2026-6022 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-progress-4/ https://t.co/i1d3Th8sHU

    Post summary

    The tweet lists two CVEs affecting Progress products and points to a CERT page for more information, but provides no further technical or exploit details.

    0000097
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6022 In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the… https://www.cve.org/CVERecord?id=CVE-2026-6022

    Post summary

    The text announces an uncontrolled resource consumption vulnerability in Telerik UI for AJAX RadAsyncUpload before version 2026.1.421, without providing any PoC, exploit, or patch details.

    00000148
    57.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appprogresstelerik_ui_for_asp.net_ajax---

Explore more

Back to dashboardprogress CVEstelerik_ui_for_asp.net_ajax vulnerabilities