CVE-2026-13189 | Progress Telerik UI for ASP.NET AJAX up to 2026.2.707 Spell Check Language server-side request forgery

A vulnerability, which was classified as critical, was found in Progress Telerik UI for ASP.NET AJAX up to 2026.2.707. This issue affects some unknown processing of the component Spell Check. Executing a manipulation of the argument Language can lead to server-side request forgery. This vulnerability is tracked as CVE-2026-13189. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.