12:49
2026-09-07
tantosec.com
ai-research
From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for Asp.net Ajax
Tanto Security discovered an unauthenticated AES-CBC padding oracle in Telerik UI for ASP.NET AJAX, chained with two other vulnerabilities to achieve remote code execution affecting versions 2010.1.30…