This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-106128 | BDVDB-2026-401062 Detail

Progress SoftwareKendo UI for Vue

Description#

Prototype Pollution in @progress/kendo-vue-common in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0 allows a high-privileged attacker who can control a field path processed by components such as the Scheduler to modify the prototype of built-in objects, resulting in a limited impact on confidentiality, integrity, and availability.

Impact#

CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

Weaknesses#

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.