CVE-2026-78178 in jQWidgets

Prediction

by VulDB Data Team • 08/23/2026

A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes. The attack can be initiated remotely. The reported GitHub issue was closed with the label "not planned".

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-394562
• CPE: ready
• CWE: CWE-1321 (confirmed)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-78178
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78178
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-78178/