CVE-2026-110445

CVSS 8.8 (high) · published 2026-10-14

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code with the privileges of the current user.

Weakness: CWE-94

Source: NVD CVE-2026-110445

References

• https://www.twcert.org.tw/en/cp-139-11271-be75e-2.html
• https://www.twcert.org.tw/tw/cp-132-11270-88d86-1.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.