CVE-2026-10032 Blast Radius

MEDIUM • CVSS 6.1The openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent c…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-10032.

Start Free Scan →← Back to CVE-2026-10032