The Button Was the Payload: A2UI CVE-2026-10032
CVE-2026-10032 shows how an agent-generated button can turn declarative UI data into browser behavior. Trace the sink, safe lab, patch, and detections.
CVE-2026-10032 shows how an agent-generated button can turn declarative UI data into browser behavior. Trace the sink, safe lab, patch, and detections.