HIGH 7.5 NVD

CVE-2026-118039

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is processed or exported to PDF.

References

https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-xml-exter

Published: 2026-10-28 · Source: NVD · Feed updated: 2026-10-28

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-10-28 via NVD.

vulnfeed aggregates 14962 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.