Improper Control of Code Generation Vulnerability in Telerik UI for WinForms
CVE-2026-124699

7.8HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Ui For Winforms
Vendor: CVE Published:; 12 November 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-124699?

In versions of Telerik UI for WinForms prior to 2026.4.1111, a vulnerability exists that permits attackers to manipulate code generation processes. This can lead to the execution of unauthorized code within the affected application, posing a significant risk to application integrity and security. Organizations using these versions should apply the latest updates to mitigate potential security breaches.

Affected Version(s)

Telerik UI for WinForms 2026.3.1007 < 2026.4.1111

References

https://www.telerik.com/products/winforms/documentation/k...

vendor-advisory

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 12, 2026
Vulnerability Reserved
Nov 9, 2026

CVE-2026-124699 Data

JSON