CVE-2026-6023
HIGH
NVD
CVSS Score
8.1
Severity
HIGH
Published
Apr 22, 2026
Vendor
unknown
Description
In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client. If an attacker tampers with this state, a server-side remote code execution is possible.