CVE-2024-24276: Teamwire

Critical severity, CVSS 9.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the chat name, message preview, username and group name components.

Affected products

• Teamwire Teamwire: from 2.0.1, before 2.3.0 (fixed in 2.3.0)

Published 2024-03-05. Last modified 2026-06-17.