CVE-2026-106139 | Progress Kendo UI for Vue up to 10.0.x Tooltip cross site scripting

October 10, 2026 Yanac

A vulnerability was found in Progress Kendo UI for Vue up to 10.0.x. It has been declared as problematic. Affected is an unknown function of the component Tooltip. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-106139. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More