CVE-2026-118039

7.5 HIGH

Published 2026-10-28 · Updated 2026-10-28

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is processed or exported to PDF.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-611

All references

https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-xml-external-entity-reference-cve-2026-118039

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-10025
MEDIUMCVE-2026-101893
HIGHCVE-2026-102127PoC
HIGHCVE-2026-102155
HIGHCVE-2026-104679
HIGHCVE-2026-106616
UNSCOREDCVE-2026-108357PoC
UNSCOREDCVE-2026-108358PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.