CVE-2026-119102

CVSS 6.5 (medium) · published 2026-11-13

In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist.

Weakness: CWE-20

Source: NVD CVE-2026-119102

References

• https://www.telerik.com/blazor-ui/documentation/knowledge-base/kb-security-improper-input-validation-cve-2026-119102

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.