CVE-2026-50230Disclosure

LOWCVSS 5.1 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code through the search parameter. Attackers can craft malicious URLs with JavaScript payloads in the search parameter to execute code in users' browsers within the context of the affected application.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-06-05); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

pdnuclei-bot@pdnuclei_bot127d
Disclosure
🚨 CVE-2026-50230 - medium 🚨 Lyrion Music Server <= 9.2.0 - Cross-Site Scripting > Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-50230 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet discloses a medium‑severity reflected XSS flaw in Lyrion Music Server <=9.2.0, provides a link to a Nuclei PoC template, but does not include exploit code, patch info, or active exploitation evidence.
00011128
958 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
Disclosure
CVE-2026-50230 Unauthenticated Reflected Cross-Site Scripting in Lyrion Music Se... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-50230 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE‑2026‑50230, an unauthenticated reflected XSS in Lyrion Music Server, and directs readers to a vulnerability details page for more information.
0000034
4.0K followersView on X

Explore more

Back to dashboard