{"schema_version":1,"title":"Progress Kendo UI for jQuery vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 25 vulnerabilities in Progress Kendo UI for jQuery: 12 in the last 7 days and 25 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-124698, was published on 12 November 2026. 13 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/kendo-ui-for-jquery","json_url":"https://junglewise.ai/threats/technologies/kendo-ui-for-jquery.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/kendo-ui-for-jquery","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":12,"all_time":25,"critical":0,"exploited":0,"last_7_days":12,"last_30_days":25,"last_90_days":25,"last_365_days":25},"latest":[{"cve":"CVE-2026-124698","cvss":7.1,"slug":"cve-2026-124698-in-progress-kendo-ui-for-jquery-the-chart-default-tooltip","title":"Progress Telerik Kendo UI for jQuery Chart XSS in tooltip","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:31.32+00:00","url":"https://junglewise.ai/threats/cve-2026-124698-in-progress-kendo-ui-for-jquery-the-chart-default-tooltip"},{"cve":"CVE-2026-124697","cvss":7.1,"slug":"cve-2026-124697-in-progress-kendo-ui-for-jquery-chart-shared-tooltip-rendering","title":"Progress Telerik Kendo UI for jQuery Chart XSS in shared-tooltip","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:31.16+00:00","url":"https://junglewise.ai/threats/cve-2026-124697-in-progress-kendo-ui-for-jquery-chart-shared-tooltip-rendering"},{"cve":"CVE-2026-124696","cvss":7.1,"slug":"cve-2026-124696-in-progress-kendo-ui-for-jquery-spreadsheet-sheet-names-are","title":"Progress Kendo UI for jQuery Spreadsheet XSS in sheet names","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:30.993+00:00","url":"https://junglewise.ai/threats/cve-2026-124696-in-progress-kendo-ui-for-jquery-spreadsheet-sheet-names-are"},{"cve":"CVE-2026-124695","cvss":7.1,"slug":"cve-2026-124695-in-progress-kendo-ui-for-jquery-form-the-items-hint-option-is","title":"Progress Telerik Kendo UI jQuery Form cross-site scripting in item hints","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:30.79+00:00","url":"https://junglewise.ai/threats/cve-2026-124695-in-progress-kendo-ui-for-jquery-form-the-items-hint-option-is"},{"cve":"CVE-2026-124691","cvss":7.1,"slug":"cve-2026-124691-in-progress-kendo-ui-for-jquery-gantt-the-task-editor-s-parent","title":"Progress Telerik Kendo UI for jQuery Gantt cross-site scripting in Parent dropdown","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:30.637+00:00","url":"https://junglewise.ai/threats/cve-2026-124691-in-progress-kendo-ui-for-jquery-gantt-the-task-editor-s-parent"},{"cve":"CVE-2026-124694","cvss":7.1,"slug":"cve-2026-124694-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but","title":"Progress Kendo UI for jQuery PropertyGrid XSS in bound values","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:18.517+00:00","url":"https://junglewise.ai/threats/cve-2026-124694-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but"},{"cve":"CVE-2026-124692","cvss":7.1,"slug":"cve-2026-124692-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but","title":"Progress Kendo UI for jQuery XSS in Grid column-reorder drag clue","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:18.227+00:00","url":"https://junglewise.ai/threats/cve-2026-124692-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but"},{"cve":"CVE-2026-124690","cvss":7.1,"slug":"cve-2026-124690-in-progress-kendo-ui-for-jquery-sanitizesvgcontent-parses-custom","title":"Progress Kendo UI for jQuery DOM-based XSS in SVG icon sanitization","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:18.08+00:00","url":"https://junglewise.ai/threats/cve-2026-124690-in-progress-kendo-ui-for-jquery-sanitizesvgcontent-parses-custom"},{"cve":"CVE-2026-124689","cvss":7.1,"slug":"cve-2026-124689-in-progress-kendo-ui-for-jquery-versions-2026-3-1014-up-to-but","title":"Progress Kendo UI for jQuery ActionSheet XSS in header encoding","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:17.933+00:00","url":"https://junglewise.ai/threats/cve-2026-124689-in-progress-kendo-ui-for-jquery-versions-2026-3-1014-up-to-but"},{"cve":"CVE-2026-124688","cvss":7.1,"slug":"cve-2026-124688-in-progress-kendo-ui-for-jquery-prior-to-2026-4-1111-the","title":"Progress Kendo UI for jQuery XSS in TabStrip, PanelBar, Menu widgets","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:17.783+00:00","url":"https://junglewise.ai/threats/cve-2026-124688-in-progress-kendo-ui-for-jquery-prior-to-2026-4-1111-the"},{"cve":"CVE-2026-124687","cvss":7.1,"slug":"cve-2026-124687-in-progress-kendo-ui-for-jquery-versions-from-2022-2-621-prior","title":"Progress Kendo UI for jQuery markup injection in DropDownButton and SplitButton","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:17.63+00:00","url":"https://junglewise.ai/threats/cve-2026-124687-in-progress-kendo-ui-for-jquery-versions-from-2022-2-621-prior"},{"cve":"CVE-2026-124686","cvss":5.4,"slug":"cve-2026-124686-in-progress-kendo-ui-for-jquery-versions-prior-to-2026-4-1111","title":"Progress Kendo UI for jQuery code injection in kendo.init()","severity":"medium","exploited":false,"published_at":"2026-11-11T16:17:25.19+00:00","url":"https://junglewise.ai/threats/cve-2026-124686-in-progress-kendo-ui-for-jquery-versions-prior-to-2026-4-1111"},{"cve":"CVE-2026-108116","cvss":7.5,"epss":0.0025,"slug":"cve-2026-108116-in-progress-kendo-ui-for-jquery-prior-to-v2026-3-1015-specially","title":"Progress Kendo UI for jQuery MDX and SOAP injection in PivotGrid","severity":"high","exploited":false,"published_at":"2026-10-15T15:17:22.753+00:00","url":"https://junglewise.ai/threats/cve-2026-108116-in-progress-kendo-ui-for-jquery-prior-to-v2026-3-1015-specially"},{"cve":"CVE-2026-106153","cvss":5.4,"epss":0.0016,"slug":"cve-2026-106153-in-progress-kendo-ui-for-jquery-prior-to-version-2026-3-1015-the","title":"Progress Kendo UI for jQuery cross-site scripting in Calendar","severity":"medium","exploited":false,"published_at":"2026-10-15T15:17:22.307+00:00","url":"https://junglewise.ai/threats/cve-2026-106153-in-progress-kendo-ui-for-jquery-prior-to-version-2026-3-1015-the"},{"cve":"CVE-2026-106151","cvss":5.4,"epss":0.0016,"slug":"cve-2026-106151-in-progress-kendo-ui-for-jquery-versions-starting-with-2012-2","title":"Progress Kendo UI for jQuery Validator cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-10-15T15:17:22.157+00:00","url":"https://junglewise.ai/threats/cve-2026-106151-in-progress-kendo-ui-for-jquery-versions-starting-with-2012-2"},{"cve":"CVE-2026-106149","cvss":5.4,"epss":0.0016,"slug":"cve-2026-106149-in-progress-kendo-ui-for-jquery-prior-to-v2026-3-1015-the-menu","title":"Progress Kendo UI for jQuery Menu component stored XSS","severity":"medium","exploited":false,"published_at":"2026-10-15T15:17:21.843+00:00","url":"https://junglewise.ai/threats/cve-2026-106149-in-progress-kendo-ui-for-jquery-prior-to-v2026-3-1015-the-menu"},{"cve":"CVE-2026-106163","cvss":6.5,"epss":0.0017,"slug":"cve-2026-106163-in-progress-kendo-ui-for-jquery-versions-starting-with-v2023-1","title":"Progress Kendo UI for jQuery cross-site scripting in FileBrowser and ImageBrowser","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:15.083+00:00","url":"https://junglewise.ai/threats/cve-2026-106163-in-progress-kendo-ui-for-jquery-versions-starting-with-v2023-1"},{"cve":"CVE-2026-106162","cvss":4.7,"epss":0.0013,"slug":"cve-2026-106162-in-progress-kendo-ui-for-jquery-versions-starting-with-2023-3","title":"Progress Kendo UI for jQuery FileManager XSS in drag hints","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.963+00:00","url":"https://junglewise.ai/threats/cve-2026-106162-in-progress-kendo-ui-for-jquery-versions-starting-with-2023-3"},{"cve":"CVE-2026-106161","cvss":5.4,"epss":0.0016,"slug":"cve-2026-106161-in-progress-kendo-ui-for-jquery-releases-starting-with-v2020-1","title":"Progress Kendo UI for jQuery Badge text XSS via data binding","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.843+00:00","url":"https://junglewise.ai/threats/cve-2026-106161-in-progress-kendo-ui-for-jquery-releases-starting-with-v2020-1"},{"cve":"CVE-2026-106160","cvss":5.4,"epss":0.0018,"slug":"cve-2026-106160-in-progress-kendo-ui-for-jquery-prior-to-2026-3-1015-model","title":"Progress Kendo UI for jQuery prototype pollution in Model.accept","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.727+00:00","url":"https://junglewise.ai/threats/cve-2026-106160-in-progress-kendo-ui-for-jquery-prior-to-2026-3-1015-model"},{"cve":"CVE-2026-106159","cvss":4.7,"epss":0.0016,"slug":"cve-2026-106159-in-progress-kendo-ui-for-jquery-versions-starting-with-2022-3","title":"Progress Kendo UI for jQuery XSS via ToolBar ButtonGroup URLs","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.603+00:00","url":"https://junglewise.ai/threats/cve-2026-106159-in-progress-kendo-ui-for-jquery-versions-starting-with-2022-3"},{"cve":"CVE-2026-106158","cvss":4.7,"epss":0.0016,"slug":"cve-2026-106158-in-progress-kendo-ui-for-jquery-in-v2026-3-811-and-earlier-the","title":"Progress Kendo UI for jQuery Scheduler XSS via resource color","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.483+00:00","url":"https://junglewise.ai/threats/cve-2026-106158-in-progress-kendo-ui-for-jquery-in-v2026-3-811-and-earlier-the"},{"cve":"CVE-2026-106157","cvss":4.7,"epss":0.0016,"slug":"cve-2026-106157-in-progress-kendo-ui-for-jquery-versions-starting-with-2019-2","title":"Progress Kendo UI for jQuery PanelBar XSS in item URLs","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.367+00:00","url":"https://junglewise.ai/threats/cve-2026-106157-in-progress-kendo-ui-for-jquery-versions-starting-with-2019-2"},{"cve":"CVE-2026-106148","cvss":5.4,"epss":0.0016,"slug":"cve-2026-106148-in-progress-kendo-ui-for-jquery-prior-to-2026-3-1015-the","title":"Progress Kendo UI for jQuery XSS in TabStrip, Menu, and PanelBar","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.243+00:00","url":"https://junglewise.ai/threats/cve-2026-106148-in-progress-kendo-ui-for-jquery-prior-to-2026-3-1015-the"},{"cve":"CVE-2026-106147","cvss":5.4,"epss":0.0016,"slug":"cve-2026-106147-in-progress-kendo-ui-for-jquery-releases-starting-with-r1-2020","title":"Progress Kendo UI for jQuery ListBox stored XSS via unencoded dataTextField","severity":"medium","exploited":false,"published_at":"2026-10-15T14:17:14.12+00:00","url":"https://junglewise.ai/threats/cve-2026-106147-in-progress-kendo-ui-for-jquery-releases-starting-with-r1-2020"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":13},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":12}],"related":[{"name":"Progress Marklogic Server","slug":"marklogic-server","vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/marklogic-server"},{"name":"Progress MOVEit Transfer","slug":"moveit-transfer","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/moveit-transfer"},{"name":"Progress WhatsUp Gold","slug":"whatsup-gold","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/whatsup-gold"},{"name":"Progress LoadMaster","slug":"loadmaster","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/loadmaster"},{"name":"Progress Sitefinity","slug":"sitefinity","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/sitefinity"},{"name":"Progress ADC","slug":"adc","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/adc"},{"name":"Progress Connection Manager for ObjectScale","slug":"connection-manager-for-objectscale","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/connection-manager-for-objectscale"},{"name":"Progress ECS Connection Manager","slug":"ecs-connection-manager","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/ecs-connection-manager"},{"name":"Progress Telerik Document Processing Libraries","slug":"telerik-document-processing-libraries","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/telerik-document-processing-libraries"},{"name":"Progress Telerik Report Server","slug":"telerik-report-server","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/telerik-report-server"},{"name":"Progress ShareFile Storage Zones Controller","slug":"progress-sharefile-storage-zones-controller","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/progress-sharefile-storage-zones-controller"},{"name":"Progress Kendo Ui","slug":"kendo-ui","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/kendo-ui"}],"technology":{"hub":true,"name":"Progress Kendo UI for jQuery","slug":"kendo-ui-for-jquery","vendor":{"hub":true,"name":"Progress","slug":"progress","url":"https://junglewise.ai/threats/vendors/progress"},"aliases":[],"category":"framework","homepage":"https://www.telerik.com/kendo-jquery-ui","description":"Kendo UI for jQuery is a JavaScript framework providing UI components and widgets.","url":"https://junglewise.ai/threats/technologies/kendo-ui-for-jquery"},"most_severe":[{"cve":"CVE-2026-108116","cvss":7.5,"epss":0.0025,"slug":"cve-2026-108116-in-progress-kendo-ui-for-jquery-prior-to-v2026-3-1015-specially","title":"Progress Kendo UI for jQuery MDX and SOAP injection in PivotGrid","severity":"high","exploited":false,"published_at":"2026-10-15T15:17:22.753+00:00","url":"https://junglewise.ai/threats/cve-2026-108116-in-progress-kendo-ui-for-jquery-prior-to-v2026-3-1015-specially"},{"cve":"CVE-2026-124698","cvss":7.1,"slug":"cve-2026-124698-in-progress-kendo-ui-for-jquery-the-chart-default-tooltip","title":"Progress Telerik Kendo UI for jQuery Chart XSS in tooltip","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:31.32+00:00","url":"https://junglewise.ai/threats/cve-2026-124698-in-progress-kendo-ui-for-jquery-the-chart-default-tooltip"},{"cve":"CVE-2026-124697","cvss":7.1,"slug":"cve-2026-124697-in-progress-kendo-ui-for-jquery-chart-shared-tooltip-rendering","title":"Progress Telerik Kendo UI for jQuery Chart XSS in shared-tooltip","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:31.16+00:00","url":"https://junglewise.ai/threats/cve-2026-124697-in-progress-kendo-ui-for-jquery-chart-shared-tooltip-rendering"},{"cve":"CVE-2026-124696","cvss":7.1,"slug":"cve-2026-124696-in-progress-kendo-ui-for-jquery-spreadsheet-sheet-names-are","title":"Progress Kendo UI for jQuery Spreadsheet XSS in sheet names","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:30.993+00:00","url":"https://junglewise.ai/threats/cve-2026-124696-in-progress-kendo-ui-for-jquery-spreadsheet-sheet-names-are"},{"cve":"CVE-2026-124695","cvss":7.1,"slug":"cve-2026-124695-in-progress-kendo-ui-for-jquery-form-the-items-hint-option-is","title":"Progress Telerik Kendo UI jQuery Form cross-site scripting in item hints","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:30.79+00:00","url":"https://junglewise.ai/threats/cve-2026-124695-in-progress-kendo-ui-for-jquery-form-the-items-hint-option-is"},{"cve":"CVE-2026-124691","cvss":7.1,"slug":"cve-2026-124691-in-progress-kendo-ui-for-jquery-gantt-the-task-editor-s-parent","title":"Progress Telerik Kendo UI for jQuery Gantt cross-site scripting in Parent dropdown","severity":"high","exploited":false,"published_at":"2026-11-12T17:17:30.637+00:00","url":"https://junglewise.ai/threats/cve-2026-124691-in-progress-kendo-ui-for-jquery-gantt-the-task-editor-s-parent"},{"cve":"CVE-2026-124694","cvss":7.1,"slug":"cve-2026-124694-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but","title":"Progress Kendo UI for jQuery PropertyGrid XSS in bound values","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:18.517+00:00","url":"https://junglewise.ai/threats/cve-2026-124694-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but"},{"cve":"CVE-2026-124692","cvss":7.1,"slug":"cve-2026-124692-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but","title":"Progress Kendo UI for jQuery XSS in Grid column-reorder drag clue","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:18.227+00:00","url":"https://junglewise.ai/threats/cve-2026-124692-in-progress-kendo-ui-for-jquery-versions-2026-3-1015-up-to-but"},{"cve":"CVE-2026-124690","cvss":7.1,"slug":"cve-2026-124690-in-progress-kendo-ui-for-jquery-sanitizesvgcontent-parses-custom","title":"Progress Kendo UI for jQuery DOM-based XSS in SVG icon sanitization","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:18.08+00:00","url":"https://junglewise.ai/threats/cve-2026-124690-in-progress-kendo-ui-for-jquery-sanitizesvgcontent-parses-custom"},{"cve":"CVE-2026-124689","cvss":7.1,"slug":"cve-2026-124689-in-progress-kendo-ui-for-jquery-versions-2026-3-1014-up-to-but","title":"Progress Kendo UI for jQuery ActionSheet XSS in header encoding","severity":"high","exploited":false,"published_at":"2026-11-11T17:17:17.933+00:00","url":"https://junglewise.ai/threats/cve-2026-124689-in-progress-kendo-ui-for-jquery-versions-2026-3-1014-up-to-but"}],"generated_at":"2026-11-12T18:07:00.176012+00:00"}