CVE-2026-106138 | Progress KendoReact up to 16.1.x Chart Tooltip cross site scripting

October 10, 2026 Yanac

A vulnerability was found in Progress KendoReact up to 16.1.x. It has been classified as problematic. This impacts an unknown function of the component Chart Tooltip. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-106138. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More