CVEvulnerability

CVE-2026-118040

7.5 HIGH Published 2026-10-28 Modified 2026-10-28 Official page ↗
Status
Undergoing Analysis
Published
2026-10-28
Last modified
2026-10-28
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-295, CWE-347

Description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.

Related

Weakness · CWE (2)

  • CWE-295 Improper Certificate Validation weakness
  • CWE-347 Improper Verification of Cryptographic Signature weakness

References