VulnSocial

CVE-2026-50234Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory structure.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-05); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-05: 1Mentions · 2026-06-09: 1Patch / Workaround · 2026-06-09: 1Technical Details · 2026-06-05: 1Technical Details · 2026-06-09: 106-0506-09
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-06-051
Disclosure1
2026-06-091
Patch1
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-50234 Lyrion Music Server 9.2.0 - Path Traversal (CVSS 7.5) Unauthenticated attackers can read arbitrary files via directory traversal. Patch immediately if running v9.2.0 #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/0wRMR1GVCr

    Post summary

    The tweet alerts about CVE‑2026‑50234 in Lyrion Music Server 9.2.0, a path‑traversal flaw that permits unauthenticated file reads, and urges users to patch immediately; no exploits or active attacks are reported.

    0000038
    44 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-50234 Path Traversal Vulnerability in Lyrion Music Server 9.2.0 Allows Unauthenticated File Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-50234

    Post summary

    The text announces a new path traversal flaw in Lyrion Music Server 9.2.0 that permits unauthenticated file access, providing technical details but no exploit or mitigation.

    0000033
    4.0K followersView on X

Explore more

Back to dashboard