Is CVE-2026-92356 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-92356?

CVE-2026-92356 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-92356

Description

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basic_functions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.