CVE-2026-106149 | Progress Kendo UI for jQuery up to 2026.3.1014 Menu cross site scripting

October 15, 2026 Yanac

A vulnerability was found in Progress Kendo UI for jQuery up to 2026.3.1014. It has been classified as problematic. This impacts an unknown function of the component Menu. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2026-106149. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More