{"id":"CVE-2026-116688","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-116688","generatedAt":"2026-10-28T01:12:31.391Z","title":"From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming style attribute values.","description":"CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming style attribute values. Crafted editor content can thereby cause unauthorized JavaScript execution in the browser. This issue is fixed in versions 47.7.4 and 48.5.1.","published":"2026-10-27T20:17:14.000Z","lastModified":"2026-10-27T20:17:14.000Z","status":"Received","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"3.1","score":8.1,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-79"],"affected":[],"epss":null,"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unscored. Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-27T20:17:14.000Z","detail":{"score":"8.1","severity":"HIGH","publishedAt":"2026-10-27T20:17:14.037Z"},"summary":"New CVE, high severity (CVSS 8.1)."}],"references":[{"url":"https://github.com/ckeditor/ckeditor5/commit/4d9c5bb34f63cd956d15ccafbe584e14280c86a0","source":"security-advisories@github.com"},{"url":"https://github.com/ckeditor/ckeditor5/commit/a750e38635db6a18c5b11599c09f4fd702850423","source":"security-advisories@github.com"},{"url":"https://github.com/ckeditor/ckeditor5/releases/tag/v47.7.4","source":"security-advisories@github.com"},{"url":"https://github.com/ckeditor/ckeditor5/releases/tag/v48.5.1","source":"security-advisories@github.com"},{"url":"https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rh54-vffm-5fvp","source":"security-advisories@github.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-116688","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}