Advisories · Technology

Progress Software Kendo UI for jQuery.

Every CVE that names Progress Software Kendo UI for jQuery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108116 CVE record

CVSS 7.5 High

MDX and SOAP Injection in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Other injection
Not analysed yet 15 Oct 2026
CVE-2026-106153 CVE record

CVSS 5.4 Medium

Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106151 CVE record

CVSS 5.4 Medium

Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106150 CVE record

CVSS 5.4 Medium

Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106149 CVE record

CVSS 5.4 Medium

Cross-site Scripting (XSS) in Kendo UI for jQuery Menu
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106148 CVE record

CVSS 5.4 Medium

Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106147 CVE record

CVSS 5.4 Medium

Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106161 CVE record

CVSS 5.4 Medium

Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106160 CVE record

CVSS 5.4 Medium

Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Prototype pollution
Not analysed yet 15 Oct 2026
CVE-2026-106159 CVE record

CVSS 4.7 Medium

Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106158 CVE record

CVSS 4.7 Medium

Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106157 CVE record

CVSS 4.7 Medium

Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106162 CVE record

CVSS 4.7 Medium

Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-106163 CVE record

CVSS 6.5 Medium

Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
- Progress Software Kendo UI for jQuery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2025-6725 CVE record

CVSS 5.4 Medium

Cross-Site Scripting (XSS) in PdfViewer
- Progress Software Kendo UI for jQuery
- Progress Software Kendo UI for Angular
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2025