CVE-2026-124702
HIGH
NVD
CVSS Score
7.8
Severity
HIGH
Published
Nov 12, 2026
Vendor
unknown
Description
In Telerik UI for WPF, versions prior to 2026.4.1110, an untrusted URL redirection vulnerability exists that allows an attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via crafted documents and hyperlinks with a non-allowlisted URI scheme that the user opens.