CVE-2026-92356 PUBLISHED

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basic_functions.ts of the component Update Components. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

• colorfullbz (VulDB User) reporter
• VulDB CNA Team coordinator

• VDB-405443 | a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption
• VDB-405443 | CTI Indicators (IOB, IOC, TTP, IOA)
• CVE-2026-92356 | CVE Analysis and Report
• Submit #934117 | a2ui-project a2ui v0.9 CWE-400
• https://github.com/a2ui-project/a2ui/issues/2298
• https://github.com/a2ui-project/a2ui/

• Resource Consumption CWE
• Denial of Service CWE