{"affected":[{"defaultStatus":"unaffected","product":"Telerik UI for WPF","source":"CNA: ProgressSoftware","vendor":"Progress Software","versions":[{"lessThan":"2026.4.1110","status":"affected","version":"2026.3.1007","versionType":"custom"}]}],"cveId":"CVE-2026-124703","cwes":["CWE-94"],"description":"In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: ProgressSoftware","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.8,"severity":"high","source":"NVD: security@progress.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794482230743,"publishedAt":1794480821511,"references":[{"source":"CNA: ProgressSoftware","tags":["vendor-advisory"],"url":"https://www.telerik.com/products/wpf/documentation/knowledge-base/kb-security-improper-control-of-generation-of-code-cve-2026-124703"},{"source":"security@progress.com","tags":[],"url":"https://www.telerik.com/products/wpf/documentation/knowledge-base/kb-security-improper-control-of-generation-of-code-cve-2026-124703"}],"remediation":[],"revision":"0681d0cc06004353fac92744c92584569dacb21a0b63512fa555f63218d841c1","sources":[{"modifiedAt":1794480821511,"name":"CNA: ProgressSoftware","retrievedAt":1794481703373,"url":"https://www.cve.org/CVERecord?id=CVE-2026-124703"},{"modifiedAt":1794482230743,"name":"NVD","retrievedAt":1794485822112,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124703"}],"ssvc":null,"status":"published","title":"Improper Control of Generation of Code in Progress Telerik UI for WPF","updatedAt":1794485822112}