CVE-2026-106144 | Progress Kendo UI for Angular up to 25.0.x Scheduler path prototype pollution

November 6, 2026 Yanac

A vulnerability classified as problematic has been found in Progress Kendo UI for Angular up to 25.0.x. Affected by this vulnerability is an unknown functionality of the component Scheduler. This manipulation of the argument path causes improperly controlled modification of object prototype attributes.

This vulnerability is registered as CVE-2026-106144. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More