CVE-2025-15251: Beecue Fastbee

Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."

Affected products

• Beecue Fastbee: version 2.0 only; version 2.1 only

Published 2025-12-30. Last modified 2026-06-17.