CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-01
beecue FastBee IoT Platform Groovy Script Executor Remote Code Injection Vulnerability (CVE-2026-120274)
[Affected Scope] beecue FastBee up to version 2.1.0, specifically the /iot/script endpoint
[Impact] A remote attacker with high privileges can inject arbitrary Groovy code, leading to unauthorized command execution and full system compromise
[Mitigation] Apply the official patch commit (890a3384) or upgrade to the latest version, and restrict access to the script execution endpoint