CVE-2025-3600
In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 26.3%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 26.27% probability · 98th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-470
- Affected
- progress/telerik ui for asp.net ajax
- Source
- security@progress.com
EPSS moved from 26.3% on 21 October 2026 to 26.3% on 2 November 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.