CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-118039

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is processed or exported to PDF.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 19.1%

CVSS Severity

CVSS v3 Score 7.5

References

https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-xml-external-entity-reference-cve-2026-118039

Products affected by CVE-2026-118039

Progress » Telerik Document Processing Libraries » Version: N/A

cpe:2.3:a:progress:telerik_document_processing_libraries:-
Progress » Telerik Document Processing Libraries » Version: 2024.4.1106

cpe:2.3:a:progress:telerik_document_processing_libraries:2024.4.1106
Progress » Telerik Document Processing Libraries » Version: 2025.1.205

cpe:2.3:a:progress:telerik_document_processing_libraries:2025.1.205

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-118039

Products

Pricing

Contact Us