CVE-2026-106137

Vendor

Progress Software

Product

Telerik UI for ASP.NET MVC

CVSS v3.1

8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness

CWE-362, CWE-401

Exposure class

Developer platform, File transfer

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 48
   CVE NVD 1h ago

   In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary…

   In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that…

   CVSS 8.6 Fix available CVE-2026-106137 Progress Software