CVE-2026-37468

CVSS 6.1 (medium) · published 2026-10-30

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.

Weakness: CWE-79

Source: NVD CVE-2026-37468

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.