What is GHSA-wr2c-qfj2-22f2?

GHSA-wr2c-qfj2-22f2 is a security advisory published by GitHub Security Advisories with High severity. In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper...

Which CVE IDs does GHSA-wr2c-qfj2-22f2 cover?

GHSA-wr2c-qfj2-22f2 covers the following CVE IDs: CVE-2026-118040. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wr2c-qfj2-22f2?

GHSA-wr2c-qfj2-22f2 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-wr2c-qfj2-22f2HighCVSS 7.5

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-118040 →

📋 Description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-118040
https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-improper-verification-of-cryptographic-signature-cve-2026-118040
https://github.com/advisories/GHSA-wr2c-qfj2-22f2