Threats affecting pkg:nuget/telerik.ui.for.wpf

CVE-2026-124704 is a deserialization of untrusted data vulnerability in Progress Software's Telerik UI for WPF affecting versions from 2026.3.1007 up to but not including 2026.4.1110. This flaw allows an attacker to perform unauthorized actions within the context of the affected application. The vulnerability has a high severity rating with a CVSS score of 7.8. A fix is available in version 2026.4.1110.

CVE-2026-124703 is a code injection vulnerability in Progress Software's Telerik UI for WPF affecting versions from 2026.3.1007 up to but not including 2026.4.1110. This flaw allows an attacker to execute unauthorized code within the context of the affected application due to improper control of code generation. The vulnerability has a high severity rating with a CVSS score of 7.8. A fix is available in version 2026.4.1110.