Progress Telerik UI for WPF: Improper Control of Code Generation (CVE-2026-124703)
Progress Telerik UI for WPF versions prior to 2026.4.1110 contain an improper control of code generation vulnerability that allows for unauthorized code execution within the context of the affected application.
CVE search metadata
CVE search record: CVE-2026-124703. Severity: high. CVSS: 7.8. KEV: no. Product: Telerik UI for WPF (< 2026.4.1110). Brief: Progress Telerik UI for WPF: Improper Control of Code Generation (CVE-2026-124703). Brief link: https://feed.craftedsignal.io/briefs/2026-11-telerik-wpf-rce-cve-2026-124703/
Triage facts
Revision 1- Applicability
- Telerik UI for WPF (< 2026.4.1110)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 14:16 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Progress Telerik UI for WPF versions prior to 2026.4.1110 are affected by an improper control of code generation vulnerability (CVE-2026-124703). This vulnerability allows an attacker to execute unauthorized code in the context of the affected application. The vulnerability has a CVSS v3.1 base score of 7.8.