Is CVE-2026-13192 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-13192?

CVE-2026-13192 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-13192

Description

In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of Windows authentication credentials.