CVE-2026-118248 | Highcharts up to 4.2.1 Dashboards editableOptions prototype pollution

October 28, 2026 Yanac

A vulnerability categorized as critical has been discovered in Highcharts up to 4.2.1. Affected by this vulnerability is an unknown functionality of the component Dashboards. The manipulation of the argument editableOptions results in improperly controlled modification of object prototype attributes.

This vulnerability is reported as CVE-2026-118248. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More