CVE-2026-106135 | Progress Kendo UI for Angular up to 25.2.x Chat OpenURL cross site scripting

A vulnerability labeled as problematic has been found in Progress Kendo UI for Angular up to 25.2.x. Affected by this vulnerability is the function OpenURL of the component Chat. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-106135. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More