CVE-2026-118040

HIGH Status: Undergoing Analysis

CVSS Scores

CVSS v3.x Base Score
7.5
HIGH

Description

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.

Published
October 28, 2026 1:17 PM
Last Modified
October 28, 2026 2:07 PM
Source
[email protected]

Weaknesses (CWE)

CWE-295 CWE-347

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry