{"id":"CVE-2026-124703","kind":"vulnerability","aliases":["CVE-2026-124703"],"related":[],"title":"Telerik UI for WPF: code generation flaw lets an attacker run unauthorized code","description":"In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application.","summary":"In Telerik UI for WPF, a code generation control flaw lets an attacker execute unauthorized code inside the affected application. The sources give a CVSS score of 7.8 (high) and no details on the trigger.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dotnet","nuget","package","telerik-ui-wpf","windows"],"not_affected_if":["version-2026.4.1110-or-later"],"how_to_check":"- Check the installed Telerik UI for WPF version in the project's NuGet package references (`Telerik.UI.for.Wpf` or the equivalent package id).","fix":"- Telerik UI for WPF: move to `2026.4.1110` or later.","status":"open","published_at":"2026-11-12T11:17:10+00:00","first_seen_at":"2026-11-12T11:38:04+00:00","triaged_at":"2026-11-12T11:40:02+00:00","updated_at":"2026-11-12T11:40:02+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-12T11:40:02Z","model":"claude-haiku-5-5","output":{"fix":"- Telerik UI for WPF: move to `2026.4.1110` or later.","reach":"unknown","title":"Telerik UI for WPF: code generation flaw lets an attacker run unauthorized code","impact":"high","summary":"In Telerik UI for WPF, a code generation control flaw lets an attacker execute unauthorized code inside the affected application. The sources give a CVSS score of 7.8 (high) and no details on the trigger.","audience":"developers","category":"package","nicknames":[],"who_cares":["telerik-ui-wpf","nuget","windows","dotnet"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Attacker runs unauthorized code in the affected application","analyst_note":"Check the NVD entry and Telerik's security advisory for the attack vector and whether user input reaches the code generation path.","how_to_check":"- Check the installed Telerik UI for WPF version in the project's NuGet package references (`Telerik.UI.for.Wpf` or the equivalent package id).\n- unknown for other checks; the sources do not say.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-2026.4.1110-or-later"],"who_is_affected":"Applications built with Telerik UI for WPF older than 2026.4.1110 are affected. The sources do not say what input or configuration makes the code generation path reachable, so whether a given app is exposed is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000723,"input_tokens":4523,"output_tokens":541,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-124703':16A,19A '-2026':15A,18A '2026.4.1110':71C '7.8':55B 'affect':46B,93C 'allow':81C 'applic':47B,94C 'attack':10A,40B,83C 'code':5A,13A,34B,43B,76C,87C 'context':90C 'control':36B,74C 'cve':14A,17A 'cvss':52B 'detail':59B 'dotnet':20B 'execut':41B,85C 'exist':79C 'flaw':7A,37B 'generat':6A,35B,77C 'give':50B 'high':56B 'improp':73C 'insid':44B 'let':8A,38B 'nuget':21B 'packag':22B 'prior':69C 'run':11A 'score':53B 'sourc':49B 'telerik':1A,24B,29B,64C 'telerik-ui-wpf':23B 'trigger':62B 'ui':2A,25B,30B,65C 'unauthor':12A,42B,86C 'version':68C 'vulner':78C 'window':27B 'wpf':4A,26B,32B,67C","nicknames":[],"mitigations":[],"who_affected":"Applications built with Telerik UI for WPF older than 2026.4.1110 are affected. The sources do not say what input or configuration makes the code generation path reachable, so whether a given app is exposed is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dotnet","high","nuget","package","telerikuiwpf","windows"],"campaign_type":null,"search_a":"'-124703':16A,19A '-2026':15A,18A 'attack':10A 'code':5A,13A 'cve':14A,17A 'flaw':7A 'generat':6A 'let':8A 'run':11A 'telerik':1A 'ui':2A 'unauthor':12A 'wpf':4A","search_b":"'7.8':55B 'affect':46B 'applic':47B 'attack':40B 'code':34B,43B 'control':36B 'cvss':52B 'detail':59B 'dotnet':20B 'execut':41B 'flaw':37B 'generat':35B 'give':50B 'high':56B 'insid':44B 'let':38B 'nuget':21B 'packag':22B 'score':53B 'sourc':49B 'telerik':24B,29B 'telerik-ui-wpf':23B 'trigger':62B 'ui':25B,30B 'unauthor':42B 'window':27B 'wpf':26B,32B","search_c":"'2026.4.1110':71C 'affect':93C 'allow':81C 'applic':94C 'attack':83C 'code':76C,87C 'context':90C 'control':74C 'execut':85C 'exist':79C 'generat':77C 'improp':73C 'prior':69C 'telerik':64C 'ui':65C 'unauthor':86C 'version':68C 'vulner':78C 'wpf':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T11:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124703","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124703","severity":null,"published_at":"2026-11-12T11:17:10+00:00","modified_at":"2026-11-12T11:17:10+00:00","first_seen_at":"2026-11-12T11:38:04+00:00","fetched_at":"2026-11-12T11:38:04+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}