{"id":"CVE-2026-124704","kind":"vulnerability","aliases":["CVE-2026-124704"],"related":[],"title":"Telerik UI for WPF: untrusted data deserialization enables unauthorized actions in apps","description":"In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application.","summary":"Telerik UI for WPF, a component library for Windows desktop apps, deserializes untrusted data without checks. An attacker can perform unauthorized actions inside the affected application.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dotnet","package","telerik","windows","wpf"],"not_affected_if":["not-using-telerik-wpf"],"how_to_check":"- Check the Telerik UI for WPF version in the project's package references, e.g. the `Telerik.UI.for.Wpf` package in the .csproj or packages.config.\n- Look for any version below `2026.4.1110`.","fix":"- Telerik UI for WPF: move to `2026.4.1110` or later.","status":"open","published_at":"2026-11-12T11:17:10+00:00","first_seen_at":"2026-11-12T11:38:04+00:00","triaged_at":"2026-11-12T11:40:02+00:00","updated_at":"2026-11-12T11:40:02+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-12T11:40:02Z","model":"claude-haiku-5-5","output":{"fix":"- Telerik UI for WPF: move to `2026.4.1110` or later.","reach":"unknown","title":"Telerik UI for WPF: untrusted data deserialization enables unauthorized actions in apps","impact":"medium","summary":"Telerik UI for WPF, a component library for Windows desktop apps, deserializes untrusted data without checks. An attacker can perform unauthorized actions inside the affected application.","audience":"developers","category":"package","nicknames":[],"who_cares":["wpf","dotnet","windows","telerik"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"attacker performs unauthorized actions within the application","analyst_note":"Check the NVD entry and Telerik release notes for the affected input path, authentication requirement and whether the flaw can lead to code execution.","how_to_check":"- Check the Telerik UI for WPF version in the project's package references, e.g. the `Telerik.UI.for.Wpf` package in the .csproj or packages.config.\n- Look for any version below `2026.4.1110`.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["not-using-telerik-wpf"],"who_is_affected":"Apps built with Telerik UI for WPF older than 2026.4.1110 are exposed, and the flaw is reached through data the app deserializes. The sources do not say which input paths are exposed or whether a default configuration is affected. Teams that do not use Telerik UI for WPF can skip it.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000732,"input_tokens":4531,"output_tokens":558,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-124704':15A,18A '-2026':14A,17A '2026.4.1110':58C 'action':10A,45B,73C 'affect':48B,79C 'allow':67C 'app':12A,34B 'applic':49B,80C 'attack':41B,69C 'check':39B 'compon':29B 'context':76C 'cve':13A,16A 'data':6A,37B,63C 'deseri':7A,35B,60C 'desktop':33B 'dotnet':19B 'enabl':8A 'exist':65C 'insid':46B 'librari':30B 'packag':20B 'perform':43B,71C 'prior':56C 'telerik':1A,21B,24B,51C 'ui':2A,25B,52C 'unauthor':9A,44B,72C 'untrust':5A,36B,62C 'version':55C 'vulner':64C 'window':22B,32B 'without':38B 'wpf':4A,23B,27B,54C","nicknames":[],"mitigations":[],"who_affected":"Apps built with Telerik UI for WPF older than 2026.4.1110 are exposed, and the flaw is reached through data the app deserializes. The sources do not say which input paths are exposed or whether a default configuration is affected. Teams that do not use Telerik UI for WPF can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dotnet","high","package","telerik","windows","wpf"],"campaign_type":null,"search_a":"'-124704':15A,18A '-2026':14A,17A 'action':10A 'app':12A 'cve':13A,16A 'data':6A 'deseri':7A 'enabl':8A 'telerik':1A 'ui':2A 'unauthor':9A 'untrust':5A 'wpf':4A","search_b":"'action':45B 'affect':48B 'app':34B 'applic':49B 'attack':41B 'check':39B 'compon':29B 'data':37B 'deseri':35B 'desktop':33B 'dotnet':19B 'insid':46B 'librari':30B 'packag':20B 'perform':43B 'telerik':21B,24B 'ui':25B 'unauthor':44B 'untrust':36B 'window':22B,32B 'without':38B 'wpf':23B,27B","search_c":"'2026.4.1110':58C 'action':73C 'affect':79C 'allow':67C 'applic':80C 'attack':69C 'context':76C 'data':63C 'deseri':60C 'exist':65C 'perform':71C 'prior':56C 'telerik':51C 'ui':52C 'unauthor':72C 'untrust':62C 'version':55C 'vulner':64C 'wpf':54C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T11:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"security@progress.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124704","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124704","severity":null,"published_at":"2026-11-12T11:17:10+00:00","modified_at":"2026-11-12T11:17:10+00:00","first_seen_at":"2026-11-12T11:38:04+00:00","fetched_at":"2026-11-12T11:38:04+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}