CVE-2026-118274
Received Received - Intake

Resource Consumption in a2ui up to 0.10.6

Publication date: 2026-10-28

Last updated on: 2026-10-28

Assigner: VulDB

Description
A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of the component Binder. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is c97f4a02d3fea33ce3e9de5cf3fd0e3b8f3a4f0e. To fix this issue, it is recommended to deploy a patch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-28
Last Modified
2026-10-28
Generated
2026-10-28
AI Q&A
2026-10-28
EPSS Evaluated
N/A
NVD
CVE-2026-118274
EUVD
EUVD-2026-111567

Affected Vendors & Products

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the a2ui-project a2ui software up to version 0.10.6. It affects a file called generic-binder.ts in the Binder component. The issue allows remote attackers to cause resource consumption, potentially leading to system slowdowns or crashes.

Impact Analysis

If exploited, this vulnerability could cause your system to consume excessive resources, leading to degraded performance or service outages. It may require manual intervention to restore normal operations.

Mitigation Strategies

Deploy the patch identified as c97f4a02d3fea33ce3e9de5cf3fd0e3b8f3a4f0e to fix the resource consumption vulnerability in the Binder component.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-118274. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart