CVE-2026-106158 | Progress Kendo UI for jQuery up to 2026.3.811 Scheduler cross site scripting

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in Progress Kendo UI for jQuery up to 2026.3.811. Affected is an unknown function of the component Scheduler. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-106158. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More