CVE-2026-110444
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.
Published Oct 13, 2026 · updated Oct 14, 2026 · TEAMPLUS TECHNOLOGY TeamPlus Messenger
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code with the privileges of the current user.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code with the privileges of the current user.
Oct 14, 2026 · Catalog
Updated
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code with the privileges of the current user.
Affected
- vendor TEAMPLUS TECHNOLOGY TeamPlus Messengerversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-110444
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execu
vulnerability.circl.lu - CVE.orgCVE-2026-110444
Official CVE identifier
cve.org - NIST NVDCVE-2026-110444
TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execu
nvd.nist.gov