{"vulnerability": "CVE-2026-13181", "sightings": [{"uuid": "8d98ca79-f3fc-4cde-8bf1-3152a4d7eb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13181", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mraqrtt7w72g", "content": "Telerik UI for AJAX v2026.2.708\u4ee5\u524d\u3067\u3001\u507d\u88c5\u3055\u308c\u305f\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u30e1\u30bf\u30c7\u30fc\u30bf\u304cAsyncUploadTypeName\u51e6\u7406\u306b\u5f71\u97ff\u3057\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-13181 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-22T16:32:32.166025Z"}, {"uuid": "de502cb7-6a59-4cb1-b0ba-783b577496b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13181", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrasjljpek2b", "content": "CVE-2026-13181 - RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX\nCVE ID : CVE-2026-13181\n \n Published : July 22, 2026, 2:17 p.m. | 2\u00a0hours, 19\u00a0minutes ago\n \n Description : In Progress\u00ae Telerik\u00ae UI for AJAX prior to v2026.2.708, f...", "creation_timestamp": "2026-07-22T17:03:42.604074Z"}, {"uuid": "84c0e29b-d6f3-4309-b69b-4549fc0b3e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13181", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv22lawitc2a", "content": "\ud83d\udd34 Telerik UI unauthenticated RCE exploit is now public\n\nA complete exploit chain for CVE-2026-13181 + CVE-2026-13182 + CVE-2026-13183 can lead to unauthenticated code execution\n\nstemshop.top/blog/telerik...\n\n#CVE #CVE202613181 #CVE202613182 #CVE202613183 #Telerik #ASPnet #RCE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:20:02.320066Z"}, {"uuid": "f4eee5dc-9aea-482b-b613-2bcb26f2a62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13181", "type": "seen", "source": "https://t.me/HackerNewscyber/3420", "content": "\u2708 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0639\u0645\u0648\u0645\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0644\u0631\u06cc\u06a9\u061b \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\n\n\u00a9\ufe0f \u06cc\u06a9 \u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u0628\u0632\u0627\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0639\u0645\u0648\u0645\u06cc \u0628\u0631\u0627\u06cc \u0632\u0646\u062c\u06cc\u0631\u0647\u200c\u0627\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 \u062a\u0644\u0631\u06cc\u06a9 \u06cc\u0648\u200c\u0622\u06cc \u0628\u0631\u0627\u06cc \u0627\u06cc\u200c\u0627\u0633\u200c\u067e\u06cc\u200c\u062f\u0627\u062a\u200c\u0646\u062a \u0627\u06cc\u200c\u062c\u06a9\u0633 (Telerik UI for ASP.NET AJAX) \u062e\u0628\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0632\u0646\u062c\u06cc\u0631\u0647 \u0634\u0627\u0645\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2026-13181\u060c CVE-2026-13182 \u0648 CVE-2026-13183 \u062f\u0631 \u0645\u0624\u0644\u0641\u0647 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0641\u0627\u06cc\u0644 \u00ab\u0631\u064e\u062f \u0627\u064e\u0633\u0646\u06a9 \u0622\u067e\u0644\u0648\u062f\u00bb \u0627\u0633\u062a. \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0642\u0635 \u00ab\u067e\u062f\u06cc\u0646\u06af \u0627\u0648\u0631\u0627\u06a9\u0644\u00bb \u0648 \u0636\u0639\u0641 \u062f\u0631 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc\u060c \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0648\u0628 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u067e\u0631\u0648\u06af\u0631\u0633 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u06f8 \u0698\u0648\u0626\u06cc\u0647 \u06f2\u06f0\u06f2\u06f6 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647 2026.2.708 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f\u060c \u0627\u0645\u0627 \u0627\u06a9\u0646\u0648\u0646 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0648 \u0627\u0628\u0632\u0627\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0639\u0645\u0648\u0645\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u06cc\u0686 \u0645\u0648\u0631\u062f \u062a\u0623\u06cc\u06cc\u062f\u0634\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0639\u0645\u0648\u0645\u06cc\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627\u06cc\u062f \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-09T03:00:06.037409Z"}, {"uuid": "99f9e287-1f86-4bde-a92e-a3c8dc21b34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13181", "type": "seen", "source": "https://t.me/GithubRedTeam/101482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13181-CVE-2026-13182-CVE-2026-13183-CVE-2026-13184\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:56:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13181, CVE-2026-13182, CVE-2026-13183, CVE-2026-13184\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:07.282959Z"}, {"uuid": "71308a14-1c32-43f3-8684-6d353ad93da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13181", "type": "seen", "source": "https://t.me/GithubRedTeam/101482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13181-CVE-2026-13182-CVE-2026-13183-CVE-2026-13184\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:56:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13181, CVE-2026-13182, CVE-2026-13183, CVE-2026-13184\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:49.373097Z"}, {"uuid": "30832ff0-e5ac-441b-af1f-8cf61fe2faa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13181", "type": "published-proof-of-concept", "source": "https://t.me/HackerNewscyber/3420", "content": "\u2708 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0639\u0645\u0648\u0645\u06cc \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0644\u0631\u06cc\u06a9\u061b \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\n\n\u00a9\ufe0f \u06cc\u06a9 \u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u0628\u0632\u0627\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0639\u0645\u0648\u0645\u06cc \u0628\u0631\u0627\u06cc \u0632\u0646\u062c\u06cc\u0631\u0647\u200c\u0627\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 \u062a\u0644\u0631\u06cc\u06a9 \u06cc\u0648\u200c\u0622\u06cc \u0628\u0631\u0627\u06cc \u0627\u06cc\u200c\u0627\u0633\u200c\u067e\u06cc\u200c\u062f\u0627\u062a\u200c\u0646\u062a \u0627\u06cc\u200c\u062c\u06a9\u0633 (Telerik UI for ASP.NET AJAX) \u062e\u0628\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0632\u0646\u062c\u06cc\u0631\u0647 \u0634\u0627\u0645\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2026-13181\u060c CVE-2026-13182 \u0648 CVE-2026-13183 \u062f\u0631 \u0645\u0624\u0644\u0641\u0647 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0641\u0627\u06cc\u0644 \u00ab\u0631\u064e\u062f \u0627\u064e\u0633\u0646\u06a9 \u0622\u067e\u0644\u0648\u062f\u00bb \u0627\u0633\u062a. \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0642\u0635 \u00ab\u067e\u062f\u06cc\u0646\u06af \u0627\u0648\u0631\u0627\u06a9\u0644\u00bb \u0648 \u0636\u0639\u0641 \u062f\u0631 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc\u060c \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u0631\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0648\u0628 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0634\u0631\u06a9\u062a \u067e\u0631\u0648\u06af\u0631\u0633 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u06f8 \u0698\u0648\u0626\u06cc\u0647 \u06f2\u06f0\u06f2\u06f6 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647 2026.2.708 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0628\u0648\u062f\u060c \u0627\u0645\u0627 \u0627\u06a9\u0646\u0648\u0646 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u0648 \u0627\u0628\u0632\u0627\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0639\u0645\u0648\u0645\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u00a9\ufe0f \u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u06cc\u0686 \u0645\u0648\u0631\u062f \u062a\u0623\u06cc\u06cc\u062f\u0634\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0639\u0645\u0648\u0645\u06cc\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627\u06cc\u062f \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-10T00:00:54.824847Z"}, {"uuid": "9a91f265-e1f3-42ac-9d22-4dbdc7e8b1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13181", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mv4y6som2r2t", "content": "PoC out for chained Telerik UI RCE \u2014 seven CVEs, unauthenticated access, non-default configs affected. Progress Software\u2026 https://0daynews.com/articles/2026-09-08-telerik-ui-rce-chain-cve-2026-13181-poc-public/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1357", "creation_timestamp": "2026-09-10T02:15:11.566305Z"}]}