Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-106147

In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item template renders the bound dataTextField value as raw HTML without encoding. An attacker who can modify the bound data can supply HTML containing event handlers that execute JavaScript in a user's browser when the affected list item is rendered. Successful exploitation can compromise the confidentiality and integrity of data accessible to the affected application. This issue is fixed in version 2026.3.1015.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.0%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-106147
  • Progress » Kendo Ui » Version: 2021.2.511
    cpe:2.3:a:progress:kendo_ui:2021.2.511
  • Progress » Kendo Ui » Version: 2021.2.616
    cpe:2.3:a:progress:kendo_ui:2021.2.616
  • Progress » Kendo Ui » Version: 2021.3.1109
    cpe:2.3:a:progress:kendo_ui:2021.3.1109
  • Progress » Kendo Ui » Version: 2021.3.1207
    cpe:2.3:a:progress:kendo_ui:2021.3.1207
  • Progress » Kendo Ui » Version: 2021.3.914
    cpe:2.3:a:progress:kendo_ui:2021.3.914
  • Progress » Kendo Ui » Version: 2022.1.119
    cpe:2.3:a:progress:kendo_ui:2022.1.119
  • Progress » Kendo Ui » Version: 2022.1.301
    cpe:2.3:a:progress:kendo_ui:2022.1.301
  • Progress » Kendo Ui » Version: 2022.1.412
    cpe:2.3:a:progress:kendo_ui:2022.1.412
  • Progress » Kendo Ui » Version: 2022.2.510
    cpe:2.3:a:progress:kendo_ui:2022.2.510
  • Progress » Kendo Ui » Version: 2022.2.621
    cpe:2.3:a:progress:kendo_ui:2022.2.621
  • Progress » Kendo Ui » Version: 2022.2.802
    cpe:2.3:a:progress:kendo_ui:2022.2.802
  • Progress » Kendo Ui » Version: 2022.3.1109
    cpe:2.3:a:progress:kendo_ui:2022.3.1109
  • Progress » Kendo Ui » Version: 2022.3.913
    cpe:2.3:a:progress:kendo_ui:2022.3.913
  • Progress » Kendo Ui » Version: 2023.1.117
    cpe:2.3:a:progress:kendo_ui:2023.1.117
  • Progress » Kendo Ui » Version: 2023.1.314
    cpe:2.3:a:progress:kendo_ui:2023.1.314
  • Progress » Kendo Ui » Version: 2023.1.425
    cpe:2.3:a:progress:kendo_ui:2023.1.425
  • Progress » Kendo Ui » Version: 2023.2.606
    cpe:2.3:a:progress:kendo_ui:2023.2.606
  • Progress » Kendo Ui » Version: 2023.2.718
    cpe:2.3:a:progress:kendo_ui:2023.2.718
  • Progress » Kendo Ui » Version: 2023.2.829
    cpe:2.3:a:progress:kendo_ui:2023.2.829
  • Progress » Kendo Ui » Version: 2023.3.1010
    cpe:2.3:a:progress:kendo_ui:2023.3.1010
  • Progress » Kendo Ui » Version: 2023.3.1114
    cpe:2.3:a:progress:kendo_ui:2023.3.1114
  • Progress » Kendo Ui » Version: 2024.1.130
    cpe:2.3:a:progress:kendo_ui:2024.1.130
  • Progress » Kendo Ui » Version: 2024.1.319
    cpe:2.3:a:progress:kendo_ui:2024.1.319
  • Progress » Kendo Ui » Version: 2024.2.514
    cpe:2.3:a:progress:kendo_ui:2024.2.514
  • Progress » Kendo Ui » Version: 2024.3.1015
    cpe:2.3:a:progress:kendo_ui:2024.3.1015
  • Progress » Kendo Ui » Version: 2024.3.806
    cpe:2.3:a:progress:kendo_ui:2024.3.806
  • Progress » Kendo Ui » Version: 2024.4.1112
    cpe:2.3:a:progress:kendo_ui:2024.4.1112
  • Progress » Kendo Ui » Version: 2025.1.211
    cpe:2.3:a:progress:kendo_ui:2025.1.211
  • Progress » Kendo Ui » Version: 2025.1.227
    cpe:2.3:a:progress:kendo_ui:2025.1.227
  • Progress » Kendo Ui » Version: 2025.2.520
    cpe:2.3:a:progress:kendo_ui:2025.2.520
  • Progress » Kendo Ui » Version: 2025.2.702
    cpe:2.3:a:progress:kendo_ui:2025.2.702
  • Progress » Kendo Ui » Version: 2025.3.1002
    cpe:2.3:a:progress:kendo_ui:2025.3.1002
  • Progress » Kendo Ui » Version: 2025.3.812
    cpe:2.3:a:progress:kendo_ui:2025.3.812
  • Progress » Kendo Ui » Version: 2025.3.825
    cpe:2.3:a:progress:kendo_ui:2025.3.825
  • Progress » Kendo Ui » Version: 2025.4.1111
    cpe:2.3:a:progress:kendo_ui:2025.4.1111
  • Progress » Kendo Ui » Version: 2025.4.1217
    cpe:2.3:a:progress:kendo_ui:2025.4.1217
  • Progress » Kendo Ui » Version: 2025.4.1321
    cpe:2.3:a:progress:kendo_ui:2025.4.1321
  • Progress » Kendo Ui » Version: 2026.1.212
    cpe:2.3:a:progress:kendo_ui:2026.1.212
  • Progress » Kendo Ui » Version: 2026.1.325
    cpe:2.3:a:progress:kendo_ui:2026.1.325
  • Progress » Kendo Ui » Version: 2026.1.415
    cpe:2.3:a:progress:kendo_ui:2026.1.415
  • Progress » Kendo Ui » Version: 2026.2.520
    cpe:2.3:a:progress:kendo_ui:2026.2.520
  • Progress » Kendo Ui » Version: 2026.3.811
    cpe:2.3:a:progress:kendo_ui:2026.3.811


Products
Pricing
Contact Us

Shodan ® - All rights reserved