CVE-2026-106150 | Progress Kendo UI for jQuery up to 2026.3.1014 Splitter/Window/Tooltip cross site scripting

October 15, 2026 Yanac

A vulnerability was found in Progress Kendo UI for jQuery up to 2026.3.1014. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Splitter/Window/Tooltip. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-106150. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More