CVE-2026-110803

A flaw was found in Vaadin Framework. An unauthenticated remote attacker can exploit this issue by submitting a specially crafted request containing a non-numeric identifier parameter. This malformed input triggers an unhandled exception before the application can release an internal session lock...