CVE-2026-37468

Vulnerability Description

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.

References

https://github.com/jhonny606/mybeehome-stored-xss-2025

FAQ

What is CVE-2026-37468?

CVE-2026-37468 is a documented vulnerability. Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.

How severe is CVE-2026-37468?

CVSS scoring is not yet available for CVE-2026-37468. Check NVD for updates.

Is there a patch for CVE-2026-37468?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.