High severity7.8NVD Advisory· Published Nov 12, 2026· Updated Nov 12, 2026
CVE-2026-124700
CVE-2026-124700
Description
In Telerik UI for WinForms, versions prior to 2026.4.1111, an untrusted URL redirection vulnerability exists that allows an attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via crafted documents and hyperlinks with a non-allowlisted URI scheme that the user opens.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2026.4.1111
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.