CVE-2026-14933 | Unblu Spark up to 8.39.2 Embedded Co-browsing Feature cross site scripting

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Unblu Spark up to 7.57.7/8.35.1/8.37.1/8.38.1/8.39.2. Affected is an unknown function of the component Embedded Co-browsing Feature. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2026-14933. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More