{"id":"CVE-2026-110444","published":"2026-10-14T03:17:20.363","lastModified":"2026-10-16T16:17:03.693","description":"TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code with the privileges of the current user.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://www.twcert.org.tw/en/cp-139-11271-be75e-2.html","tags":[]},{"url":"https://www.twcert.org.tw/tw/cp-132-11270-88d86-1.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"TeamPlus Messenger contains a code injection vulnerability that allows unauthenticated remote attackers to inject arbitrary JavaScript into user sessions. When users click on a malicious link and confirm a Windows security warning, attackers can execute arbitrary code with the user's privileges.","exploitability":"Exploitation is moderately difficult as it requires social engineering to get users to click a crafted link and then confirm a Windows security warning, but once triggered, execution is straightforward.","blast_radius":"The vulnerability could impact any user who clicks on a malicious link in TeamPlus Messenger, potentially leading to full system compromise with the privileges of the logged-in user.","remediation":"No fixed version is published. Disable the affected feature or restrict access to the vulnerable endpoint until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["code-injection","web","javascript"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:26:04.090Z"}}