MinorCritical vulnerability

CVE-2026-106164 (CVSS 7.3)

NVD · officialPublished Oct 7, 2026Risk 23/100

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.

Technical details

CVSS

7.3

AV:NetworkAC:LowPR:NoneUI:NoneC:LowI:LowA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source