Cyber Centre lists flaws in several Progress Telerik products
Five CVEs cover race conditions, deserialization, configuration control, and code generation; exploitation is not stated.
42
CVE-2026-124703
Code generation flaw in Telerik UI for WPF before 2026.4.1110
- CVSS 3.1
- 7.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Telerik UI for WPF before 2026.4.1110 mishandles code generation (CWE-94). A local attacker who can get a user to interact with the affected application can run unauthorized code in that application's context, with high impact on confidentiality, integrity, and availability. Apps built with those library versions are affected.
What to do: Upgrade Telerik UI for WPF to 2026.4.1110 or later and rebuild affected applications.
| Product | Affected | Fixed in |
|---|---|---|
| Progress Telerik UI for WPF | prior to 2026.4.1110 | 2026.4.1110 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application.
- Weakness
- CWE-94
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H