PULSE
ES
FEED
ransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technologyransomqilin reclama a Innoe Asesores · MX · Professional Servicesransomaurora reclama a CP Manufacturing, Inc. · US · Manufacturingransompear reclama a Five Star Jewelers · US · Retail & E-Commerceransomdragonforce reclama a lyserp.com · Technologyransomdoommageddon reclama a A***** T******ransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technologyransomqilin reclama a Innoe Asesores · MX · Professional Servicesransomaurora reclama a CP Manufacturing, Inc. · US · Manufacturingransompear reclama a Five Star Jewelers · US · Retail & E-Commerceransomdragonforce reclama a lyserp.com · Technologyransomdoommageddon reclama a A***** T******
← All CVEs
CVE WatchOct 30, 2026

CVE-2026-37468

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 30, 2026 · Last modified: Oct 30, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.

Official references
Related CVEs

No related CVEs by CWE or product.