nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-10510 CVE-2026-10510
MEDIUM
GeniexWebView XSS in com.transsion.aiassistantlifestyle
Record summary
CVE-2026-10510 has a selected CVSS score of 6.1 (medium).
Description
Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 2, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
com.transsion.aiassistantlifestyleBrowse TECNO Mobile / com.transsion.aiassistantlifestyleDefault status: unaffected | CVE List | v1.3.0.002 | affected |
References
2security.tecno.com
https://security.tecno.com/SRC/securityUpdates