CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notification-config-store-database-jpa/src/main/java/org/a2aproject/sdk/extras/pushnotificationconfigstore/database/jpa/JpaDatabasePushNotificationConfigStore.java of the component Push Notification Config Store. Executing a manipulation can lead to resource consumption. The attack can be launched remotely. Upgrading to version 1.3.0.Final mitigates this issue. This patch is called b478810a03b4a16841d36aca5c6e87d8f48fce67. You should upgrade the affected component.

• CWE-400
• CWE-404

• https://github.com/a2aproject/a2a-java/
• https://github.com/a2aproject/a2a-java/commit/b478810a03b4a16841d36aca5c6e87d8f48fce67
• https://github.com/a2aproject/a2a-java/pull/1044
• https://github.com/a2aproject/a2a-java/releases/tag/v1.3.0.Final
• https://vuldb.com/cve/CVE-2026-117506
• https://vuldb.com/submit/1015055
• https://vuldb.com/vuln/427073
• https://vuldb.com/vuln/427073/cti

Published

Oct 27, 2026

Last Modified

Oct 27, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1175A vulnerability was identified in birkir prime up to 0.4.0.b…7.5
• CVE-2026-117500HTTP::Body versions before 1.24_01 for Perl allow CPU exhaus…
• CVE-2026-117501HTTP::Body versions before 1.24_01 for Perl allow memory exh…
• CVE-2026-117503A vulnerability was determined in a2aproject a2a-go up to 2.…5.3
• CVE-2026-117504A vulnerability was identified in a2aproject a2a-go up to 2.…5.3
• CVE-2026-117505A security flaw has been discovered in a2aproject a2a-java u…4.3
• CVE-2026-117507A security vulnerability has been detected in a2aproject a2a…5.4
• CVE-2026-117509A vulnerability was detected in crownpku Rasa_NLU_Chi up to …6.3
• CVE-2026-11751A vulnerability has been identified in armeria-xds versions …9.1
• CVE-2026-117510A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affect…6.3
• CVE-2026-117511A vulnerability has been found in desmondmorris node-tessera…7.3
• CVE-2026-117512A vulnerability was found in oretnom23 php-travel-agency-sys…7.3