Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE
TantoSec's Telerik UI PoC demonstrates unauthenticated RCE under specific non-default conditions; fixes shipped in July.
More info