VulnSocial

CVE-2026-50232Patch

LOWCVSS 5.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Lyrion Music Server 9.2.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through media file metadata tags like GENRE, ARTIST, and ALBUM. Attackers can craft files with XSS payloads in metadata tags that execute in the web interface when users view track information or play files, enabling access to management functions and settings disclosure.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-05); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-05: 1Mentions · 2026-06-07: 1Mentions · 2026-06-09: 1Patch / Workaround · 2026-06-07: 1Patch / Workaround · 2026-06-09: 1Technical Details · 2026-06-05: 1Technical Details · 2026-06-07: 1Technical Details · 2026-06-09: 106-0506-0706-09
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-051
Disclosure1
2026-06-071
Patch1
2026-06-091
Patch1
Full discourse3 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2026-50232 - Stored XSS in Lyrion Music Server 9.2.0. Malicious scripts via metadata tags like GENRE, ARTIST, ALBUM. CVSS 7.2. No patch available. Disable metadata previews or isolate until patch. #CVE #Lyrion #infosec #CVEAlerts FREE updates and patches https://www.valtersit.com/cve/CVE-2026-50232

    Post summary

    The post announces a stored XSS vulnerability (CVE-2026-50232) in Lyrion Music Server 9.2.0, provides technical details, and recommends disabling metadata previews or isolating systems until a patch becomes available.

    0001038
    919 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-50232 Lyrion Music Server 9.2.0 vulnerable to stored XSS (CVSS 7.2). Attackers inject malicious scripts via media metadata tags (GENRE, ARTIST, ALBUM), executing when users view tracks. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/FIqYewnFpK

    Post summary

    Lyrion Music Server 9.2.0 suffers from a stored XSS flaw via media metadata (CVSS 7.2); users are urged to apply the patch immediately.

    0000043
    44 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-50232 Stored Cross-Site Scripting in Lyrion Music Server 9.2.0 via Media Metadata Tags https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-50232

    Post summary

    A stored XSS vulnerability (CVE-2026-50232) has been disclosed for Lyrion Music Server 9.2.0, triggered via media metadata tags.

    0000027
    4.0K followersView on X

Explore more

Back to dashboard