---
id: "CVE-2026-124703"
page: "https://infrastack.ai/live/CVE-2026-124703"
kind: "vulnerability"
aliases: ["CVE-2026-124703"]
title: "Telerik UI for WPF: code generation flaw lets an attacker run unauthorized code"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["dotnet", "nuget", "package", "telerik-ui-wpf", "windows"]
not_affected_if: ["version-2026.4.1110-or-later"]
published_at: "2026-11-12T11:17:10+00:00"
first_seen_at: "2026-11-12T11:38:04+00:00"
updated_at: "2026-11-12T11:40:02+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124703", "first_seen_at": "2026-11-12T11:38:04+00:00"}]
exploit_sources: []
---

# Telerik UI for WPF: code generation flaw lets an attacker run unauthorized code

Link for people: https://infrastack.ai/live/CVE-2026-124703 (this .md is for agents)

In Telerik UI for WPF, a code generation control flaw lets an attacker execute unauthorized code inside the affected application. The sources give a CVSS score of 7.8 (high) and no details on the trigger.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Telerik UI for WPF version in the project's NuGet package references (`Telerik.UI.for.Wpf` or the equivalent package id).

## Fix

- Telerik UI for WPF: move to `2026.4.1110` or later.

## Timeline

- 2026-11-12T11:38:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124703

## From the sources

In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_