Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerability in the log viewer that allows attackers to inject malicious scripts by exploiting unescaped template variables. Attackers can inject XSS payloads through search, lines, and path query parameters or by crafting values that get logged such as URLs, User-Agent headers, stream titles, or player names to execute arbitrary scripts in users' browsers.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
🚨 HIGH: CVE-2026-50231 (CVSS 7.2) Lyrion Music Server 9.2.0 - unauthenticated stored XSS in log viewer. Attackers can inject scripts via query params or logged values (URLs, User-Agent, player names). Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/I9NpbxRxSG
Post summary
The message alerts that CVE-2026-50231 is a high‑severity XSS flaw in Lyrion Music Server and urges users to apply the patch immediately.
CVE-2026-50231 - Stored XSS in Lyrion Music Server 9.2.0. Unauthenticated script injection via log viewer. CVSS 7.2. Unpatched. Restrict access immediately. #CVE #Lyrion #cybersecurity #CVEAlert #Linux Free UPDATES: https://www.valtersit.com/cve/CVE-2026-50231/
Post summary
The tweet discloses CVE‑2026‑50231, a stored XSS in Lyrion Music Server 9.2.0 that remains unpatched and urges immediate restriction of access while directing users to an update link for remediation.