What’s Vulnerable › Products

Progress Software KendoReact vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Progress Software KendoReact version is affected

Latest Progress Software KendoReact vulnerabilities

• CVE-2026-106138 — Cross-Site Scripting via Chart Tooltip in KendoReact (CVSS 5.4)
• CVE-2025-6725 — Cross-Site Scripting (XSS) in PdfViewer (CVSS 5.4)
• CVE-2024-12629 — Prototype Pollution in Progress® Telerik® KendoReact (CVSS 7.2)