MEDIUM

CVE-2026-92114

2026-09-15 CVSS v3.1

CVSS

5.3

Description

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.

Weakness (CWE)

CWE-400 Uncontrolled Resource Consumption

CWE-1333

EPSS Score

0.54%

Probability of exploitation in next 30 days

44.2th percentile

References

https://github.com/a2ui-project/a2ui/ https://github.com/a2ui-project/a2ui/issues/2292 https://github.com/a2ui-project/a2ui/pull/2366 https://vuldb.com/cve/CVE-2026-92114 https://vuldb.com/submit/934085 https://vuldb.com/vuln/404283 https://vuldb.com/vuln/404283/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE