---
id: CVE-2026-118040
title: >-
  Improper Signature and Certificate Validation in Telerik Document Processing
  Libraries RadPdfProcessing
summary: >-
  In Progress® Telerik® Document Processing Libraries prior to version
  2026.3.1027, improper verification of cryptographic signatures and improper
  certificate validation in RadPdfProcessing digital signature validation allow
  an unauthentic…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-347
  - CWE-295
vendor: Progress Software
product: Telerik Document Processing Libraries
affected:
  - telerik_document_processing_libraries < 2026.3.1027
published: '2026-10-28'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T12:30:41.623Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-118040'
references:
  - url: >-
      https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-improper-verification-of-cryptographic-signature-cve-2026-118040
tags:
  - cve.org
ingestedAt: '2026-10-28T13:11:23.680Z'
---

## Overview

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged content as unmodified and its signing certificate as valid via a crafted signed PDF document.

## Affected

- `telerik_document_processing_libraries < 2026.3.1027`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.