CVE-2026-92114

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.

  • Published Sep 15, 2026
  • CVSS 6.9 medium
  • 0.7% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-92114 at the National Vulnerability Database