CVE-2026-10510 — GeniexWebView XSS in com.transsion.aiassistantlifestyle

CVE-2026-10510

GeniexWebView XSS in com.transsion.aiassistantlifestyle PUBLISHED

Description (CNA)

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.

Affected (CNA)

Vendor / product	Versions
TECNO Mobile / com.transsion.aiassistantlifestyle	affected v1.3.0.002

CWE

CWE-79

References

https://security.tecno.com/SRC/securityUpdates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.