HIGH 7.5 NVD

CVE-2026-108116

In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML

In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup into SOAP requests, potentially exposing data accessible through the configured XMLA connection.

References

https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-pivotgrid

Published: 2026-10-15 · Source: NVD · Feed updated: 2026-10-15

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-10-15 via NVD.

vulnfeed aggregates 14529 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.