CVE-2026-106128 | Progress Kendo UI for Vue up to 9.2.0 Scheduler prototype pollution

A vulnerability was found in Progress Kendo UI for Vue up to 9.2.0. It has been classified as problematic. This impacts an unknown function of the component Scheduler. Performing a manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability is known as CVE-2026-106128. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More