Improper Control of Code Generation in Telerik UI for WPF
CVE-2026-124703

7.8HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Ui For WPf
Vendor: CVE Published:; 12 November 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-124703?

A security flaw in Telerik UI for WPF allows the improper control of code generation, which can be exploited by attackers to execute unauthorized code within the affected application. This vulnerability impacts versions prior to 2026.4.1110, making it crucial for users to update their software to mitigate potential risks. The exploit can allow unauthorized access, posing a significant threat to application integrity and security.

Affected Version(s)

Telerik UI for WPF 2026.3.1007 < 2026.4.1110

References

https://www.telerik.com/products/wpf/documentation/knowle...

vendor-advisory

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 12, 2026
Vulnerability Reserved
Nov 9, 2026

CVE-2026-124703 Data

JSON