CVE-2026-106134 | Progress KendoReact up to 16.1.x Menu cross site scripting

A vulnerability was found in Progress KendoReact up to 16.1.x. It has been classified as problematic. The affected element is an unknown function of the component Menu. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2026-106134. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More