CVE-2026-124688 | Progress Kendo UI for jQuery up to 2026.4.1110 TabStrip/PanelBar/Menu dataSource cross site scripting

November 11, 2026 Yanac

A vulnerability classified as problematic has been found in Progress Kendo UI for jQuery up to 2026.4.1110. This affects an unknown function of the component TabStrip/PanelBar/Menu. Performing a manipulation of the argument dataSource results in cross site scripting.

This vulnerability is identified as CVE-2026-124688. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More