Dashboard / CVE-2026-118040

CVE-2026-118040

HIGH
MEDIUM Priority: 0.01 BB Relevance: 75/100
Published: 2026-10-28 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: High
A: None

Description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
Progress Software Telerik Document Processing Libraries 0 < 2026.3.1027
Progress Software Telerik Document Processing Libraries 0 < 2026.3.1027

References & Advisories (1)

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS — Exploitation Probability

0.09%
Raw Score 0.000890
Percentile 0.4%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links