CVE-2026-118250 | Highcharts up to 11.4.8/12.6.0/3.0.x Series Keys Path series.keys prototype pollution

October 28, 2026 Yanac

A vulnerability marked as critical has been reported in Highcharts up to 11.4.8/12.6.0/3.0.x. This vulnerability affects unknown code of the component Series Keys Path Handler. Performing a manipulation of the argument series.keys results in improperly controlled modification of object prototype attributes.

This vulnerability is known as CVE-2026-118250. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More