← Database

CVE-2026-119102

MEDIUM CVSS: 6.5 Published: 2026-11-13 Modified: 2026-11-13

Description

In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist.

Affected Platforms

Unknown

Weakness Type

CWE-20

References