CVE-2026-78178 | jQWidgets up to 24.0.1 jqwidgets/jqx-all.js JQXLite.extend/jqxBaseFramework.extend prototype pollution (Issue 764)

August 23, 2026 Yanac

A vulnerability classified as critical has been found in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes.

This vulnerability is handled as CVE-2026-78178. The attack can be initiated remotely. There is not any exploit available.

The reported GitHub issue was closed with the label “not planned”.VulDB Recent EntriesRead More