Lyrie.Ai Multiple Critical Vulnerabilities Disclosed Affecting Various Products
Article Content
- •Six critical vulnerabilities disclosed, all with CVSS scores of 9.8 or higher.
- •CVE-2026-25775 allows unauthorized firmware updates on SenseLive X3050 devices.
- •CVE-2026-8935 enables the creation of admin accounts in WP MAPS PRO without authentication.
A series of critical vulnerabilities (CVEs) have been disclosed affecting multiple products, all with a CVSS score of 9.8. CVE-2026-25775 allows unauthorized firmware operations on SenseLive X3050. CVE-2026-8935 enables unauthenticated admin account creation in WP MAPS PRO. CVE-2026-50890 features a SQL injection flaw in grocy v4.6.0, exposing sensitive data. CVE-2026-49105 involves unauthenticated PHP Object Injection in several WordPress plugins. CVE-2026-50886 presents incorrect access control in Project Firefly III. These vulnerabilities could lead to severe breaches if exploited. All vulnerabilities were validated by three independent sources before publication.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (18)
Following this threat?
Track CVE-2026-25775 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
WordPress Vulnerabilities Surge with New Threat Response Team Announcement During the week of October 12-18, 2026, Wordfence reported 497 vulnerabilities in 327 WordPress plugins and 23 themes. The Wordfence Threat Response Team was introduced to address active threats, allowing users to report issues directly. This team will focus on urgent threats within the first 72 hours of detection.… 
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…