CVE-2026-118040 Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-118040?
CVE-2026-118040 is a high-severity vulnerability in Progress Software Telerik Document Processing Libraries, published on 28 Oct 2026.
Official description
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.
Which versions are affected by CVE-2026-118040?
How do I fix CVE-2026-118040?
No fix has been published for CVE-2026-118040 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-118040 being exploited?
There is no known exploitation of CVE-2026-118040 in the wild and no public exploit code.
Sources
Also known as GHSA-wr2c-qfj2-22f2.