CVE-2026-116688 | CKEditor up to 47.7.3/48.5.0 Style Attribute Processing null termination

October 27, 2026 Yanac

A vulnerability identified as critical has been detected in CKEditor up to 47.7.3/48.5.0. The impacted element is an unknown function of the component Style Attribute Processing. This manipulation causes miscalculated null termination.

This vulnerability is registered as CVE-2026-116688. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More