Skip to content
OpenAdvisories
High · 7.8 CVE-2026-124704 EUVD-2026-124345GHSA-fgc4-49gw-6v88

Deserialization of Untrusted Data in Progress Telerik UI for WPF

Published Nov 12, 2026 · Assigned by ProgressSoftware

Description

In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application.

Affected products

VendorProductAffectedFixed
Progress Software Telerik UI for WPF 2026.3.1007 – < 2026.4.1110 2026.4.1110

References