Deserialization Vulnerability in Telerik UI for WPF
CVE-2026-124704

7.8HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Ui For WPf
Vendor: CVE Published:; 12 November 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-124704?

In Telerik UI for WPF versions prior to 2026.4.1110, a vulnerability allows attackers to exploit deserialization of untrusted data. This could enable unauthorized actions within the affected application, potentially compromising its integrity. It's crucial to upgrade to the latest version to mitigate this risk and ensure application security.

Affected Version(s)

Telerik UI for WPF 2026.3.1007 < 2026.4.1110

References

https://www.telerik.com/products/wpf/documentation/knowle...

vendor-advisory

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 12, 2026
Vulnerability Reserved
Nov 9, 2026

CVE-2026-124704 Data

JSON