{"uuid": "c3a690a5-f57a-4076-9bf2-9231ae839a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86218", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117230492903072022", "content": "New.\nTanto Security: From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/\nMore:\nThe Hacker News: Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE \u2014 Public Exploit Released https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/\nAlso:\nN-able issued another fix yesterday https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/\nN-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw https://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.html #vulnerability  #Oracle #infosec", "creation_timestamp": "2026-09-07T15:36:03.545821Z"}