CVE-2026-106143 | Progress Kendo UI for Vue up to 10.0.x Editor cross site scripting

November 6, 2026 Yanac

A vulnerability was found in Progress Kendo UI for Vue up to 10.0.x and classified as problematic. Impacted is an unknown function of the component Committer. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-106143. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More