What’s Vulnerable › Products

Progress Software Kendo UI for jQuery vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your Progress Software Kendo UI for jQuery version is affected

Latest Progress Software Kendo UI for jQuery vulnerabilities

• CVE-2026-108116 — MDX and SOAP Injection in Kendo UI for jQuery (CVSS 7.5)
• CVE-2026-106153 — Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar (CVSS 5.4)
• CVE-2026-106151 — Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery (CVSS 5.4)
• CVE-2026-106150 — Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip (CVSS 5.4)
• CVE-2026-106149 — Cross-site Scripting (XSS) in Kendo UI for jQuery Menu (CVSS 5.4)
• CVE-2026-106163 — Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser (CVSS 6.5)
• CVE-2026-106162 — Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery (CVSS 4.7)
• CVE-2026-106161 — Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery (CVSS 5.4)
• CVE-2026-106160 — Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery (CVSS 5.4)
• CVE-2026-106159 — Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery (CVSS 4.7)
• CVE-2026-106158 — Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery (CVSS 4.7)
• CVE-2026-106157 — Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery (CVSS 4.7)
• CVE-2026-106148 — Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery (CVSS 5.4)
• CVE-2026-106147 — Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery (CVSS 5.4)
• CVE-2025-6725 — Cross-Site Scripting (XSS) in PdfViewer (CVSS 5.4)
• CVE-2018-14037 — (CVSS 6.1)