Security News Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE TheHackerNews Daniel Bender 07 Sep 2026 Share TantoSec's Telerik UI PoC demonstrates unauthenticated RCE under specific non-default conditions; fixes shipped in July.