CVE-2019-18935

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 20, 2026

Last Seen

September 7, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Telerik UI Vulnerability Chain Enables Unauthenticated RCE Attacks57.8

A significant vulnerability chain in Telerik UI for ASP.NET AJAX has been disclosed, allowing unauthenticated attackers to achieve remote code execution (RCE) through a padding oracle exploit. The vulnerabilities affect versions 2010.1.309 to 2026.2.519, with a patch available in version 2026.2.708....