Is Progress Telerik safe right now?
No Progress Telerik flaws have been added to CISA's exploited list in the last 90 days (the most recent was Jun 13, 2024). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
- Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
- Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
- Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 0 | 0 |
| 2025 | 0 | 0 |
| 2024 | 1 | 0 |
| 2023 | 1 | 0 |
| 2022 | 1 | 0 |
Questions
Is Progress Telerik safe right now?
No Progress Telerik flaws have been added to CISA's exploited list in the last 90 days (the most recent was Jun 13, 2024). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many Progress Telerik vulnerabilities have been exploited?
4 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 2 of them used by ransomware.
Covers products matching telerik. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.