CVE-2026-106127

Prototype Pollution in the setter utility @progress/kendo-react-common in Progress Software KendoReact versions 3.5.0 through 16.0.0 allows a high-privileged attacker who can control a field path passed to the utility, directly or through components such as the Form, Scheduler, and Gantt, to modi...

CVE-2026-106127 Prototype Pollution in Progress Software KendoReact

Prototype Pollution in the setter utility @progress/kendo-react-common in Progress Software KendoReact versions 3.5.0 through 16.0.0 allows a high-privileged attacker who can control a field path passed to the utility, directly or through components such as the Form, Scheduler, and Gantt, to modi...

EUVD-2026-118370

Prototype Pollution in the setter utility @progress/kendo-react-common in Progress Software KendoReact versions 3.5.0 through 16.0.0 allows a high-privileged attacker who can control a field path passed to the utility, directly or through components such as the Form, Scheduler, and Gantt, to modi...