Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

September 7, 2026 · 11:20 am 1 sources

Image: The Hacker News

Coverage

More coverage

• Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
  The Hacker News · September 7, 2026 11:20
  A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports of exploitation in…