CVE-2026-106159 | Progress Kendo UI for jQuery up to 2026.3.1014 ToolBar ButtonGroup cross site scripting

October 15, 2026 Yanac

A vulnerability classified as problematic has been found in Progress Kendo UI for jQuery up to 2026.3.1014. This vulnerability affects unknown code of the component ToolBar ButtonGroup. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2026-106159. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More