Threat Actors Exploit CVE-2019-18935 to Gain Remote Access and Elevate Privileges

The eSentire Threat Response Unit (TRU) warned of threat actors exploiting a six-year-old vulnerability, CVE-2019-18935, in Progress Telerik UI for ASP.NET AJAX. It allows attackers to upload and execute malicious files on vulnerable servers.