MEDIUMCVSS v3.1 4.7Vulnerability

CVE-2026-120274

A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of the file /iot/script of the component Groovy Script Executor. The manipulation leads to code injection. The attack is possible to be carried out remotely. The identifier of the patch is 890a33846005a937a58cccd738b7fb9821b82ea9. It is suggested to install a patch to address this issue.

Properties

Severity
MEDIUM
Nvd fetched at
2026-11-02T00:41:26.473023+00:00
Cvss severity
MEDIUM
Cvss score
4.7
Retrieved at
2026-11-02T00:42:01+00:00
Score
4.7
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-120274
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
First seen by Signal
2026-11-02T00:36:13+00:00
Name
CVE-2026-120274
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Published at
2026-11-01T21:17:08.157
Last modified
2026-11-01T21:17:09.303

Related Entities (2)

HAS_WEAKNESS (2)

→[Weakness]Improper Control of Generation of Code ('Code Injection')
→[Weakness]Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-120274 (CVSS v3.1 4.7) — Ninja Signal Threat Intelligence | Ninja Signal