CVE-2026-120274

The record

A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of the file /iot/script of the component Groovy Script Executor. The manipulation leads to code injection. The attack is possible to be carried out remotely. The identifier of the patch is 890a33846005a937a58cccd738b7fb9821b82ea9. It is suggested to install a patch to address this issue.

Affected packages

Related vulnerabilities

• CVE-2026-121524 A flaw has been found in sumiie24 School-Management-System up to… CWE-74
• CVE-2026-121502 A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. CWE-74
• CVE-2026-115779 Effect is a TypeScript framework that consists of several packages that work together to… CWE-74
• CVE-2026-57154 OPNsense is a FreeBSD based firewall and routing platform. CWE-74
• CVE-2026-121260 A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. CWE-74
• CVE-2026-120329 Saving the configuration of the mail backend module writes submitted settings to the page… CWE-74
• CVE-2026-120349 A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. CWE-74
• CVE-2026-120348 A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. CWE-74