Live › vulnerability › CVE-2026-118036
Go to dashboardTelerik Document Processing Libraries before 2026.3.1027 have recursion, infinite loop and resource allocation flaws in RadPdfProcessing and its AI summarization and question answering features. An unauthenticated attacker can hang or terminate the host application by submitting a crafted PDF or document text.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 13:33 UTC. All times on this page are UTC.
Applications that pass PDFs or document text from untrusted users into Telerik Document Processing Libraries, especially RadPdfProcessing or its AI summarization and question answering features. Applications that do not use these libraries, or only process trusted internal documents, are much less exposed.
No product ranges from the sources yet.
2026.3.10272026.3.1027 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summarization and question answering allow an unauthenticated attacker to terminate or hang the host process via a crafted PDF document or document text submitted for summarization or question answering.
This page as .md · .json · in your agent: get_signal("CVE-2026-118036")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.