What is GHSA-wr8m-jv5q-2q2v?

GHSA-wr8m-jv5q-2q2v is a security advisory published by GitHub Security Advisories with High severity. In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection...

Which CVE IDs does GHSA-wr8m-jv5q-2q2v cover?

GHSA-wr8m-jv5q-2q2v covers the following CVE IDs: CVE-2026-124705. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wr8m-jv5q-2q2v?

GHSA-wr8m-jv5q-2q2v has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-wr8m-jv5q-2q2vHighCVSS 7.8

In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-124705 →

📋 Description

In Progress® Telerik® UI for .NET MAUI prior to version 16.0.0, an untrusted URL redirection vulnerability in the RadRichTextEditor hyperlink handling and the RadPdfViewer link annotation handling allows an unauthenticated attacker to launch arbitrary operating system protocol handlers with attacker-controlled arguments via a crafted document or PDF link with a non-allowlisted URI scheme that the user opens.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-124705
https://www.telerik.com/maui-ui/documentation/knowledge-base/kb-security-untrusted-url-redirection-cve-2026-124705
https://github.com/advisories/GHSA-wr8m-jv5q-2q2v