Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-59905 Reflected Cross-Site Scripting Vulnerability in Kubysoft Node Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-59905
Post summary
A short notice identifies a reflected XSS flaw in Kubysoft Node Endpoint, but offers no PoC, exploit, mitigation, or evidence of active exploitation.
CVE-2025-59905 Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This fla… https://www.cve.org/CVERecord?id=CVE-2025-59905
Post summary
The text announces a reflected XSS vulnerability (CVE-2025-59905) in Kubysoft, providing endpoint details but no information on PoC, exploitation, or remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kubysoft | kubysoft | - | - | - |