{"id":"CVE-2026-106139","revision":"b793e2ffcabf4711ac255c8e87383cce","records":[{"revision":"b793e2ffcabf4711ac255c8e87383cce","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-106139","aliases":[],"title":"Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue","description":"In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a string value bound to the chart can supply HTML containing event handlers that execute JavaScript in a user's browser when the user hovers over the affected data point. Successful exploitation can compromise the confidentiality and integrity of data accessible to the affected application.","state":0,"publishedAt":"2026-10-10T09:23:48.755+00:00","modifiedAt":"2026-10-15T18:18:16.714+00:00","affected":[{"ecosystem":"Vendor product","name":"@progress/kendo-vue-charts","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Progress Software\",\n                    \"product\": \"Kendo UI for Vue\",\n                    \"packageName\": \"@progress/kendo-vue-charts\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.5.0\",\n                            \"lessThan\": \"10.1.0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4,"severity":"MEDIUM"}],"references":["https://www.telerik.com/kendo-vue-ui/components/knowledge-base/kb-security-chart-tooltip-xss-cve-2026-106139"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106139","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-106139","identifiers":["CVE-2026-106139"]},"retained":false,"historicalAffected":[]}],"coverage":[]}