Description
In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory.
Published: 2026-07-22
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability lies in the RadChart component's ChartImage.axd handler within Progress Telerik UI for ASP.NET AJAX versions prior to 2026.2.708, where a hardcoded encryption key (CWE‑321) allows an attacker to read or delete image files (.png, .jpg, etc.) residing in the application directory. This flaw compromises the confidentiality and integrity of application assets.

Affected Systems

The issue affects installations of Progress Software Telerik UI for ASP.NET AJAX that include the obsolete RadChart component accessed through the ChartImage.axd handler. Any system running a version earlier than 2026.2.708 is potentially vulnerable.

Risk and Exploitability

The CVSS score of 6.5 represents medium severity, and the EPSS score of 0.00209 (approximately < 1%) indicates a very low but non-zero likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. Attackers can exploit the vulnerability by unauthenticated HTTP requests to the ChartImage.axd URL, triggering unauthorized file read or deletion. The hardcoded key makes remediation dependent on updating to a patched release or disabling the vulnerable handler.

Generated by OpenCVE AI on August 3, 2026 at 23:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Progress Telerik UI for.NET AJAX to version 2026.2.708 or later.
  • If an immediate upgrade is not possible, restrict access to the ChartImage.axd handler to authenticated users using web.config rules.
  • Continuously monitor application logs for attempts to access or delete image files via the ChartImage.axd endpoint.

Generated by OpenCVE AI on August 3, 2026 at 23:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Progress
Progress telerik Ui For Asp.net Ajax
Vendors & Products Progress
Progress telerik Ui For Asp.net Ajax

Wed, 22 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 22 Jul 2026 14:00:00 +0000

Type Values Removed Values Added
Description In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image-extension files within the application directory.
Title Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart
Weaknesses CWE-321
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L'}

Subscriptions

Progress Telerik Ui For Asp.net Ajax
cve-icon MITRE

Status: PUBLISHED

Assigner: ProgressSoftware

Published:

Updated: 2026-07-22T19:09:34.640Z

Reserved: 2026-07-07T10:26:06.376Z

Link: CVE-2026-14932

cve-icon Vulnrichment

Updated: 2026-07-22T19:09:24.114Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-22T14:17:15.283

Modified: 2026-08-06T17:41:50.377

Link: CVE-2026-14932

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T23:45:06Z

Weaknesses
  • CWE-321

    Use of Hard-coded Cryptographic Key