CVE-2026-106127 | Progress KendoReact up to 16.0.0 Setter Utility prototype pollution

November 6, 2026 Yanac

A vulnerability described as problematic has been identified in Progress KendoReact up to 16.0.0. Affected is an unknown function of the component Setter Utility. The manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability is cataloged as CVE-2026-106127. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More