Progress Software Kendo UI for jQuery

• CVE-2026-108116 High 7.5 MDX and SOAP Injection in Kendo UI for jQuery 0.3%
• CVE-2026-106153 Medium 5.4 Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar 0.2%
• CVE-2026-106151 Medium 5.4 Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery 0.2%
• CVE-2026-106150 Medium 5.4 Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip 0.2%
• CVE-2026-106149 Medium 5.4 Cross-site Scripting (XSS) in Kendo UI for jQuery Menu 0.2%
• CVE-2026-106148 Medium 5.4 Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery 0.2%
• CVE-2026-106147 Medium 5.4 Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery 0.2%
• CVE-2026-106161 Medium 5.4 Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery 0.2%
• CVE-2026-106160 Medium 5.4 Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery 0.2%
• CVE-2026-106159 Medium 4.7 Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery 0.2%
• CVE-2026-106158 Medium 4.7 Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery 0.2%
• CVE-2026-106157 Medium 4.7 Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery 0.2%
• CVE-2026-106162 Medium 4.7 Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery 0.1%
• CVE-2026-106163 Medium 6.5 Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser 0.2%
• CVE-2025-6725 Medium 5.4 Cross-Site Scripting (XSS) in PdfViewer 0.3%