CVE-2026-110803 | Vaadin Framework up to 8.32.1 Session Locking VaadinService.requestEnd v-uiId resource consumption

October 21, 2026 Yanac

A vulnerability has been found in Vaadin Framework up to 8.32.1 and classified as problematic. The impacted element is the function VaadinService.requestEnd of the component Session Locking. Performing a manipulation of the argument v-uiId results in resource consumption.

This vulnerability is cataloged as CVE-2026-110803. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More