CVE-2026-50231

The flaw

Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerability in the log viewer that allows attackers to inject malicious scripts by exploiting unescaped template variables. Attackers can inject XSS payload

What to do

Review advisory and patch per vendor guidance.

References