Is CVE-2026-92114 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-92114?

CVE-2026-92114 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-92114

Description

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.