CVE-2026-92213

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
5.5
MEDIUM
CVSS v2 Base Score
6.5
MEDIUM

Description

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web_core/src/v0_9/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible to be carried out remotely. The patch is named fb8e85aec78d04e81feb9992a57638ca1ec4dc1b. It is suggested to install a patch to address this issue.

Published
September 16, 2026 1:16 AM
Last Modified
September 16, 2026 1:16 AM
Source
[email protected]

Weaknesses (CWE)

CWE-74 CWE-707

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.