Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• docs.telerik.com/…ion-of-cryptographic-signature-cve-2026-118040 Üretici bülteni

Kayıt geçmişi

1. 28 Eki 2026 15:30Yayımlandı

İlgili açıklar

• 7,5 CVE-2026-118037Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
• 7,5 CVE-2026-118036Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
• 7,5 CVE-2026-118035Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
• 7,5 CVE-2026-118039XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing
• 7,1 CVE-2026-118038Path Traversal in Telerik Document Processing Libraries AI Agent Tools
• 5,9 CVE-2026-87879Sensitive information disclosure due to improper token validation.