Topic

ASP.NET Web Application Security

Security of applications built on Microsoft's ASP.NET stack, covering machine key and cryptographic configuration, request handling, upload endpoints and the IIS hosting model.

Current clusters

security1 publisher

Seven Telerik UI flaws chain into pre-auth code execution on ASP.NET servers

Seven CVEs in RadAsyncUpload, RadPersistenceManager and RadDockLayout give unauthenticated code execution up to build 2026.2.519, and Progress says the exploitation is quiet enough to leave standard ASP.NET error logs clean.

Publishers:telerik.com

Reality

Evidence62
Adoption: Insufficient
Hype gap−12
Incentives72
Confidence63