SZB-4fecad435d
EUVD lists cross-site scripting in BeeHome MyBeeHome before 2025-11-01
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- BeeHome
- Product
- MyBeeHome
- First seen
Summary
The EUVD (ENISA) database has published EUVD-2026-114261 for BeeHome MyBeeHome before 2025-11-01. It describes a cross-site scripting flaw in profile editing and chat messaging that the entry says could allow a remote attacker to execute code; no CVSS score is listed.
If you use BeeHome
Check whether MyBeeHome is running a version dated 2025-11-01 or later
Contact BeeHome for patch status if no update is available
Sanitize or restrict user-supplied profile and chat content where possible
What the sources say 1
· Mastodon: “Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.” Source