08 September 2026
1. What is being reported?
Researchers have discovered a vulnerability in Telerik UI that allows attackers to chain a padding-oracle bug to perform remote code execution (RCE). This means hackers can potentially run malicious code on systems using this software without any authentication.
2. What this means in plain English
If your business uses software built with Telerik UI, this flaw could let attackers break in remotely and cause damage, steal data, or disrupt operations. Since an exploit is publicly available, the risk is higher until the issue is fixed.
3. Could this affect a small business?
Small businesses using software that includes Telerik UI components might be affected, especially if the software is exposed to the internet. If you don’t use Telerik UI or your software supplier has patched this issue, you are probably not at risk.
4. What to do now
- Check with your software suppliers or IT provider whether your systems use Telerik UI components.
- Ask if patches or updates are available to fix this vulnerability and apply them promptly.
- Limit internet exposure of any systems using Telerik UI until the issue is resolved.
- Monitor your systems for unusual activity and report any concerns to your IT support.
5. Ask your IT provider
Does any software we use include Telerik UI components vulnerable to the recent remote code execution flaw, and have patches been applied?
6. Bottom line
If your software uses Telerik UI, act quickly to check and patch to prevent hackers from taking control remotely.
Information based on reputable security reporting and CISA KEV.