CVE-2026-118040
CVE-2026-118040 · Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.
CVSS 7.5 · High · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
telerik document processing libraries
- Versions
- ≥ 0, < 2026.3.1027: Affected (custom)
Update to 2026.3.1027