CVE-2026-110737 | Vaadin flow/framework Push Endpoint cross-domain policy

October 27, 2026 Yanac

A vulnerability has been found in Vaadin flow and framework and classified as problematic. The impacted element is an unknown function of the component Push Endpoint. The manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is referenced as CVE-2026-110737. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More