Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-92357

a2ui-project a2ui Model Processor model-processor.ts information disclosure

CVSS 4.0 5.3 MEDIUMCVSS 3.1 4.3 MEDIUMCVSS 3.0 4.3 MEDIUMCVSS 2.0 4.0 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-92357

Published

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The manipulation of the argument current[segment] leads to information disclosure. The attack may be initiated remotely. The identifier of the patch is 1b3bff234661ce922cbc3771be642b23ec9fd0fa. To fix this issue, it is recommended to deploy a patch.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-92357

Published

a2ui

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "a2ui-project",
                    "product": "a2ui",
                    "versions": [
                        {
                            "version": "0.8",
                            "status": "affected"
                        },
                        {
                            "version": "0.9",
                            "status": "affected"
                        },
                        {
                            "version": "1.0",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:a2ui-project:a2ui:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Model Processor"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON