CVE-2026-106160 | Progress Kendo UI for jQuery up to 2026.3.1014 Model Model.accept prototype pollution

October 15, 2026 Yanac

A vulnerability classified as critical was found in Progress Kendo UI for jQuery up to 2026.3.1014. This issue affects the function Model.accept of the component Model. Such manipulation leads to improperly controlled modification of object prototype attributes.

This vulnerability is traded as CVE-2026-106160. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More