CVE-2026-6022

In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly, leading to disk space exhaustion.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-uncontrolled-resource-consumption-cve-2026-6022	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:*:*:*:*:*:*:*:*

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) En Progress® Telerik® UI for AJAX anterior a 2026.1.421, RadAsyncUpload contiene una vulnerabilidad de consumo de recursos no controlado que permite que las cargas de archivos excedan el tamaño máximo configurado debido a la falta de aplicación del tamaño acumulativo durante el reensamblaje de fragmentos, lo que lleva al agotamiento del espacio en disco.

Information

Published : 2026-04-22 08:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-6022

Mitre link : CVE-2026-6022

CVE.ORG link : CVE-2026-6022

JSON object : View

Products Affected

progress

telerik_ui_for_asp.net_ajax

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2026-6022", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6022", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-22T12:25:41.076779Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@progress.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@progress.com", "affectedData": [{"vendor": "Progress Software", "product": "Telerik UI for ASP.NET AJAX", "versions": [{"status": "affected", "version": "2011.2.712", "lessThan": "2026.1.421", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-22T08:16:12.903", "references": [{"url": "https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-uncontrolled-resource-consumption-cve-2026-6022", "tags": ["Mitigation", "Vendor Advisory"], "source": "security@progress.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@progress.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "In Progress\u00ae Telerik\u00ae UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly, leading to disk space exhaustion."}, {"lang": "es", "value": "En Progress\u00ae Telerik\u00ae UI for AJAX anterior a 2026.1.421, RadAsyncUpload contiene una vulnerabilidad de consumo de recursos no controlado que permite que las cargas de archivos excedan el tama\u00f1o m\u00e1ximo configurado debido a la falta de aplicaci\u00f3n del tama\u00f1o acumulativo durante el reensamblaje de fragmentos, lo que lleva al agotamiento del espacio en disco."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2294D8C-7233-41C4-8A32-DB1239FC7805", "versionEndExcluding": "2026.1.421"}], "operator": "OR"}]}], "sourceIdentifier": "security@progress.com"}