CVE-2026-120274 | beecue FastBee up to 2.1.0 Groovy Script Executor /iot/script code injection (IKIU7D)

November 1, 2026 Yanac

A vulnerability classified as problematic has been found in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of the file /iot/script of the component Groovy Script Executor. The manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-120274. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More