Untrusted URL Redirection in Progress Telerik UI for .NET MAUI
CVE-2026-124705

7.8HIGH

Key Information:

Vendor: Progress Software
Status: Telerik Ui For .net Maui
Vendor: CVE Published:; 12 November 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-124705?

An untrusted URL redirection vulnerability in Progress Telerik UI for .NET MAUI allows unauthenticated attackers to exploit hyperlink handling in RadRichTextEditor and link annotations in RadPdfViewer. By crafting a malicious document or PDF link with an unallowlisted URI scheme, attackers can launch arbitrary operating system protocol handlers with their own arguments when the user interacts with these links. This vulnerability poses significant security risks, as it can lead to unauthorized actions on the user's system.

Affected Version(s)

Telerik UI for .NET MAUI 5.2.0 < 16.0.0

References

https://www.telerik.com/maui-ui/documentation/knowledge-b...

vendor-advisory

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 12, 2026
Vulnerability Reserved
Nov 9, 2026

CVE-2026-124705 Data

JSON