CVE-2026-116229
Full vulnerability record from the local CVENow database.
Description
A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file apps/electron/src/preload.ts of the component Renderer-Process IPC Bridge. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 11.4.32 is recommended to address this issue. Patch name: def118fdf36f8f3b615966893a132dd81d9cc3dc. Upgrading the affected component is recommended.
Severity
LOW
CVSS score
2.0
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-10-26 08:17:17.227000
Last modified
2026-10-26 17:17:24.560000
View original CVE JSON
{
"id": "CVE-2026-116229",
"sourceIdentifier": "[email protected]",
"published": "2026-10-26T08:17:17.227",
"lastModified": "2026-10-26T17:17:24.560",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file apps/electron/src/preload.ts of the component Renderer-Process IPC Bridge. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 11.4.32 is recommended to address this issue. Patch name: def118fdf36f8f3b615966893a132dd81d9cc3dc. Upgrading the affected component is recommended."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "ffxiv-teamcraft",
"product": "FFXIV Teamcraft",
"cpes": [
"cpe:2.3:a:ffxiv-teamcraft:ffxiv_teamcraft:*:*:*:*:*:*:*:*"
],
"modules": [
"Renderer-Process IPC Bridge"
],
"versions": [
{
"version": "11.4.0",
"status": "affected"
},
{
"version": "11.4.1",
"status": "affected"
},
{
"version": "11.4.2",
"status": "affected"
},
{
"version": "11.4.3",
"status": "affected"
},
{
"version": "11.4.4",
"status": "affected"
},
{
"version": "11.4.5",
"status": "affected"
},
{
"version": "11.4.6",
"status": "affected"
},
{
"version": "11.4.7",
"status": "affected"
},
{
"version": "11.4.8",
"status": "affected"
},
{
"version": "11.4.9",
"status": "affected"
},
{
"version": "11.4.10",
"status": "affected"
},
{
"version": "11.4.11",
"status": "affected"
},
{
"version": "11.4.12",
"status": "affected"
},
{
"version": "11.4.13",
"status": "affected"
},
{
"version": "11.4.14",
"status": "affected"
},
{
"version": "11.4.15",
"status": "affected"
},
{
"version": "11.4.16",
"status": "affected"
},
{
"version": "11.4.17",
"status": "affected"
},
{
"version": "11.4.18",
"status": "affected"
},
{
"version": "11.4.19",
"status": "affected"
},
{
"version": "11.4.20",
"status": "affected"
},
{
"version": "11.4.21",
"status": "affected"
},
{
"version": "11.4.22",
"status": "affected"
},
{
"version": "11.4.23",
"status": "affected"
},
{
"version": "11.4.24",
"status": "affected"
},
{
"version": "11.4.25",
"status": "affected"
},
{
"version": "11.4.26",
"status": "affected"
},
{
"version": "11.4.27",
"status": "affected"
},
{
"version": "11.4.28",
"status": "affected"
},
{
"version": "11.4.29",
"status": "affected"
},
{
"version": "11.4.30",
"status": "affected"
},
{
"version": "11.4.31",
"status": "affected"
},
{
"version": "11.4.32",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.0,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 3.5,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-26T15:59:38.589025Z",
"id": "CVE-2026-116229",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://drive.google.com/drive/folders/1pxitXRLnnnl9GPnyN83ILAgWHWve3ezX?usp=sharing",
"source": "[email protected]"
},
{
"url": "https://github.com/ffxiv-teamcraft/ffxiv-teamcraft/commit/def118fdf36f8f3b615966893a132dd81d9cc3dc",
"source": "[email protected]"
},
{
"url": "https://github.com/ffxiv-teamcraft/ffxiv-teamcraft/releases/tag/v11.4.32",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-116229",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/1007305",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/426278",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/426278/cti",
"source": "[email protected]"
}
]
}