All vulnerabilities
CVE-2026-118040

Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing

Progress Software Telerik Document Processing Libraries
Open in ThreatlineRecord JSON
CVSS
7.5High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in2026.3.1027Fixed versionCVE List
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

  • 2026.3.1027Telerik Document Processing LibrariesCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.

Text from CVE List

Affected versions 1

  • Telerik Document Processing Librariesaffected: all versions before 2026.3.1027CVE List

References 1