Untrusted URL Redirection Vulnerability in Telerik UI for WinForms by Progress Software
CVE-2026-124700

7.8HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Ui For Winforms
Vendor: CVE Published:; 12 November 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-124700?

In Telerik UI for WinForms, an untrusted URL redirection vulnerability enables attackers to exploit crafted documents and hyperlinks, potentially allowing the execution of arbitrary operating system protocol handlers. This flaw allows for arbitrary arguments to be passed through non-allowlisted URI schemes, creating risks for users who may unknowingly open these malicious links.

Affected Version(s)

Telerik UI for WinForms 2026.3.1007 < 2026.4.1111

References

https://www.telerik.com/products/winforms/documentation/k...

vendor-advisory

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 12, 2026
Vulnerability Reserved
Nov 9, 2026

CVE-2026-124700 Data

JSON