CVE-2026-118036 In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorit
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-118036?
CVE-2026-118036 is a high-severity vulnerability in Progress Software Telerik Document Processing Libraries, published on 28 Oct 2026.
Official description
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summarization and question answering allow an unauthenticated attacker to terminate or hang the host process via a crafted PDF document or document text submitted for summarization or question answering.
Which versions are affected by CVE-2026-118036?
How do I fix CVE-2026-118036?
No fix has been published for CVE-2026-118036 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-118036 being exploited?
There is no known exploitation of CVE-2026-118036 in the wild and no public exploit code.
Sources
Also known as GHSA-cq22-54c7-84rx.