CVE-2026-37468

None

CVSS

—

EPSS

—

Published

Oct 30, 2026

CISA due date

—

The record

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.

Affected packages

Ecosystem	Package	Introduced	Fixed