CVE-2026-124705

Description

In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens.

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

• 7.8CVSS 3.1, Highfrom the CNA (ProgressSoftware)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What to do

• For RadPdfViewer, handle the LinkAnnotationTapped event, set Handled to true and launch only URIs with trusted schemes (http, https, mailto, tel). RadRichTextEditor has no equivalent event in the affected versions, so avoid loading documents from untrusted sources or upgrade to the fixed version.CNA workaround statement

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

Fake the Source of Data (CNA impact statement)

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

Timeline

1. 12 Nov 2026 Published

Weakness

• CWE-601

References

• www.telerik.comvendor-advisory