Untrusted URL Redirection in Telerik UI for WPF
CVE-2026-124702

7.8HIGH

Key Information:

Vendor

Progress Software
Status
Telerik Ui For WPf
Vendor
CVE Published:
12 November 2026

What is CVE-2026-124702?

In Telerik UI for WPF, there is a vulnerability that permits untrusted URL redirection, allowing malicious actors to execute arbitrary operating system protocol handlers. This can occur through the exploitation of crafted documents and hyperlinks containing non-allowlisted URI schemes. Users who interact with such documents may inadvertently expose their systems to risks if mistakenly opening these links.

Affected Version(s)

Telerik UI for WPF 2026.3.1007 < 2026.4.1110

References

https://www.telerik.com/products/wpf/documentation/knowle...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.