CVE-2026-10510: Tecno Mobile Com.transsion.aiassistantlifestyle

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.

Affected products

• Tecno Mobile Com.transsion.aiassistantlifestyle: version v1.3.0.002 only

Published 2026-06-02. Last modified 2026-07-22.