CVE-2026-2878 | Progress Telerik UI for ASP.NET AJAX 2021.1.224/2025.1.416 File Content RadAsyncUpload entropy

A vulnerability was found in Progress Telerik UI for ASP.NET AJAX 2021.1.224/2025.1.416. It has been classified as problematic. This vulnerability affects the function RadAsyncUpload of the component File Content Handler. This manipulation causes insufficient entropy.

The identification of this vulnerability is CVE-2026-2878. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.