CVE-2026-108116

In Progress Kendo UI for jQuery versions prior to v2026.3.1015 are vulnerable to MDX and SOAP injection. The issue resides in the PivotGrid XMLA transport , where specially crafted filter values can alter MDX predicates or inject XML markup into SOAP requests. This vulnerability could lead to the...