CVE-2026-124703: Improper Control of Generation of Code in Progress Telerik UI for WPF
In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress Telerik UI for WPFto a version that resolves this vulnerability.Fixed in 2026.4.1110
Event History
Frequently Asked Questions
Which deployments are affected?
Applications using Telerik UI for WPF versions earlier than 2026.4.1110 are affected. Review the Telerik UI for WPF version bundled with or referenced by each application.
What access does an attacker need?
The CVSS vector indicates local attack access and required user interaction. No attacker privileges are required before exploitation.
What could successful exploitation affect?
The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability. Unauthorized code would execute in the context of the affected application.