What is GHSA-82ph-hv94-946r?

GHSA-82ph-hv94-946r is a security advisory published by GitHub Security Advisories with High severity. In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of...

Which CVE IDs does GHSA-82ph-hv94-946r cover?

GHSA-82ph-hv94-946r covers the following CVE IDs: CVE-2026-19219. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-82ph-hv94-946r?

GHSA-82ph-hv94-946r has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-82ph-hv94-946rHighCVSS 8.1

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of...

Vendor

GitHub Security Advisories

Published

September 2, 2026

Last Modified

September 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-19219 →

📋 Description

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to, and uploads into, potentially resulting in remote code execution.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-19219
https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-dialoghandler-uploadpaths-tampering-cve-2026-19219
https://github.com/advisories/GHSA-82ph-hv94-946r