Is CVE-2026-124705 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-124705 being exploited in the wild.

How severe is CVE-2026-124705?

High severity, with a CVSS score of 7.8, published 12 November 2026.

Which products and versions are affected?

Progress Telerik UI for .NET MAUI 5.2.0 through 15.x (prior to 16.0.0).

How is CVE-2026-124705 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-124705?

Check whether you run Progress Telerik UI for .NET MAUI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-124705: Progress Telerik UI for .NET MAUI untrusted URL redirection in hyperlink handling

CVE-2026-124705 · Severity: high · CVSS 7.8 · Published 2026-11-12

Progress Telerik UI for .NET MAUI is a UI component library for .NET applications. The vulnerability allows an attacker to trigger arbitrary operating system protocol handlers (such as launching applications) by crafting a malicious document or PDF that a user opens in the RadRichTextEditor or RadPdfViewer components. This could lead to arbitrary code execution or unintended application launches if the user clicks a specially crafted link.

Vendors: Progress.

Quick answers

Is CVE-2026-124705 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-124705 being exploited in the wild.
How severe is CVE-2026-124705?: High severity, with a CVSS score of 7.8, published 12 November 2026.
Which products and versions are affected?: Progress Telerik UI for .NET MAUI 5.2.0 through 15.x (prior to 16.0.0).
Is there a fix for CVE-2026-124705?: Yes: fixed in 16.0.0. Until then: If unable to upgrade immediately, handle the LinkAnnotationTapped event in RadPdfViewer, set Handled to true, and launch only URIs with trusted schemes (http, https, mailto, tel). Avoid opening documents from untrusted sources in RadRichTextEditor, as it lacks equivalent event handling in affected versions. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-124705 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-124705?: Check whether you run Progress Telerik UI for .NET MAUI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 16.0.0

If unable to upgrade immediately, handle the LinkAnnotationTapped event in RadPdfViewer, set Handled to true, and launch only URIs with trusted schemes (http, https, mailto, tel). Avoid opening documents from untrusted sources in RadRichTextEditor, as it lacks equivalent event handling in affected versions.

Technical details

The RadRichTextEditor and RadPdfViewer components in Telerik UI for .NET MAUI (versions 5.2.0 through 15.x) fail to validate URL schemes before launching hyperlinks, allowing unauthenticated attackers to invoke OS protocol handlers with attacker-controlled arguments. The vulnerability requires user interaction (opening a crafted document and clicking a link) but no authentication. An attacker can launch arbitrary applications or protocols, potentially achieving code execution through protocol handler exploitation.

Affected products

Progress Telerik UI for .NET MAUI 5.2.0 through 15.x (prior to 16.0.0)

Timeline

2026-11-12: disclosed

References

https://www.telerik.com/maui-ui/documentation/knowledge-base/kb-security-untrusted-url-redirection-cve-2026-124705

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.