CVE-2026-37468 — Vulnerability intelligence
—
Published:
- CVSS
- 6.1
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.