Vulnerability · Published Oct 27, 2026 · Assigned by GitHub_M

CVE-2026-116688CKEditor: Cross-site scripting (XSS) in the engine package

High 8.1

In plain English

A high-severity cross-site scripting in ckeditor5 from ckeditor. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.5%top 57.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming style attribute values. Crafted editor content can thereby cause unauthorized JavaScript execution in the browser. This issue is fixed in versions 47.7.4 and 48.5.1.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Ubuntu:22.04:LTS	ckeditor3	no fix listed	UBUNTU-CVE-2026-116688
Ubuntu:24.04:LTS	ckeditor3	no fix listed	UBUNTU-CVE-2026-116688
Ubuntu:22.04:LTS	ldap-account-manager	no fix listed	UBUNTU-CVE-2026-116688
Ubuntu:24.04:LTS	ldap-account-manager	no fix listed	UBUNTU-CVE-2026-116688
Ubuntu:26.04:LTS	ldap-account-manager	no fix listed	UBUNTU-CVE-2026-116688
Ubuntu:22.04:LTS	request-tracker4	no fix listed	UBUNTU-CVE-2026-116688
Ubuntu:24.04:LTS	request-tracker4	no fix listed	UBUNTU-CVE-2026-116688
Ubuntu:26.04:LTS	request-tracker4	no fix listed	UBUNTU-CVE-2026-116688
npm	@ckeditor/ckeditor5-engine	48.5.1	GHSA-rh54-vffm-5fvp
npm	@ckeditor/ckeditor5-engine	47.7.4	GHSA-rh54-vffm-5fvp
npm	ckeditor5	48.5.1	GHSA-rh54-vffm-5fvp
npm	ckeditor5	47.7.4	GHSA-rh54-vffm-5fvp

Affected products (as reported)

Vendor	Product	Versions
ckeditor	ckeditor5	>= 45.0.0, < 47.7.4>= 48.0.0, < 48.5.1

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rh54-vffm-5fvp x_refsource_CONFIRM
https://github.com/ckeditor/ckeditor5/commit/4d9c5bb34f63cd956d15ccafbe584e14280c86a0 x_refsource_MISC
https://github.com/ckeditor/ckeditor5/commit/a750e38635db6a18c5b11599c09f4fd702850423 x_refsource_MISC
https://github.com/ckeditor/ckeditor5/releases/tag/v47.7.4 x_refsource_MISC
https://github.com/ckeditor/ckeditor5/releases/tag/v48.5.1 x_refsource_MISC