TantoSec's Telerik UI PoC demonstrates unauthenticated RCE under specific non-default conditions; fixes shipped in July.
A newly disclosed chain of vulnerabilities in Telerik UI for ASP.NET AJAX can turn an unauthenticated AES-CBC padding oracle ...