CVE-2026-106156 is a high-severity vulnerability in Progress Software Telerik UI for ASP.NET Core versions 2015.1.318 through 2026.3.811. It involves uncontrolled resource consumption due to repeated server-side aggregation requests causing dynamic assemblies and load contexts to accumulate, leading to increased memory usage. An unauthenticated remote attacker can exploit this if an aggregation endpoint is exposed without authentication, potentially exhausting system resources and impacting application availability. The issue is fixed in version 2026.3.1015.