Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#unrestricted upload

1 articles

Deep Dive

Telerik UI for ASP.NET AJAX File Read to RCE Chain (CVE-2026-18672)

Telerik UI for ASP.NET AJAX reads web.config unauthenticated and chains to RCE on sites with static keys; both flaws are fixed in 2026.3.812.

Ostorlab Team
Nov 03, 2026