CVE-2026-124703 · Package
NO FIX YET · SEE WHAT TO DO
In Telerik UI for WPF, a code generation control flaw lets an attacker execute unauthorized code inside the affected application. The sources give a CVSS score of 7.8 (high) and no details on the trigger.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Applications built with Telerik UI for WPF older than 2026.4.1110 are affected. The sources do not say what input or configuration makes the code generation path reachable, so whether a given app is exposed is unknown.
Not affected if version-2026.4.1110-or-later
Who cares dotnet, nuget, telerik-ui-wpf, windows
Telerik.UI.for.Wpf or the equivalent package id).2026.4.1110 or later.In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.