CVE-2026-13187 | Progress Telerik UI for ASP.NET AJAX up to 2026.2.707 DialogHandler provider type externally-controlled input to select classes or code

A vulnerability classified as critical was found in Progress Telerik UI for ASP.NET AJAX up to 2026.2.707. This affects an unknown part of the component DialogHandler. Such manipulation of the argument provider type leads to use of externally-controlled input to select classes or code. This vulnerability is referenced as CVE-2026-13187. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.