CVE-2026-25070Disclosure(seekswan / zikestor_sks8310-8x)

LOWCVSS 9.8 · CRITICAL

Signal is active with 5 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows unauthenticated remote attackers to execute arbitrary operating system commands. Attackers can inject malicious commands through the destIp parameter to achieve remote code execution with root privileges on the network switch.

seekswan CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

zikestor_sks8310-8x
zikestor_sks8310-8x_firmware

Threat summary

5 mentions across 1 observed day

What's happening

Technical details provided in 4 signals
Disclosure: 5 classified signals
5 total mentions across 1 day

Affected systems

Vendors

seekswan

Products

zikestor_sks8310-8xzikestor_sks8310-8x_firmware

1 version affected across 2 products

Deep dive

Activity timeline5 mentions / 1d

Signal classification1 categories

Disclosure

5100.0%

Referenced assets5 URLs

By indicator

Full discourse5 posts

CVE@CVEnew217d
Disclosure
CVE-2026-25070 XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows … https://www.cve.org/CVERecord?id=CVE-2026-25070
Post summary
The post announces an OS command injection vulnerability in XikeStor SKS8310-8X firmware, providing only the CVE reference and endpoint detail.
01010228
56.6K followersView on X
Infoflowcloud@infoflowcloud217d
Disclosure
🚨*CVE* CVE-2026-25070 XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows … https://www.cve.org/CVERecord?id=CVE-2026-25070 ----- Traducción: CVE-2026-25070 Xik… http://infoflow.cloud`
Post summary
The text announces a newly identified OS command injection vulnerability (CVE-2026-25070) in XikeStor SKS8310‑8X firmware, providing a link to the official CVE record for more details.
0000037
56 followersView on X
0day Signal@0dayPublishing217d
Disclosure
🚨 CVE-2026-25070: XikeStor SKS8310-8X PingTestSet ... Unauthenticated RCE with root on network switches via ping parameter injection - perfect pivot point for lateral moveme... https://zerodaysignal.com/vulnerability/CVE-2026-25070 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A new CVE-2026-25070 has been announced, exposing unauthenticated, root-level remote code execution on XikeStor network switches via a ping parameter injection, but no exploit code, active usage, patch, or PoC is disclosed.
0000084
140 followersView on X
VulDB 🛡@vuldb217d
Disclosure
We have just added an important vulnerability affecting Anhui Seeker Electronic XikeStor SKS8310-8X (CVE-2026-25070) https://vuldb.com/?id.349590
Post summary
The post announces that CVE-2026-25070, affecting the Anhui Seeker Electronic XikeStor SKS8310-8X, has been added to VULDB, but provides no additional technical or exploit details.
0000093
2.1K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds217d
Disclosure
CVE-2026-25070 OS Command Injection in XikeStor SKS8310-8X Network Switch Firmware 1.04.B07 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25070
Post summary
The text announces CVE-2026-25070 as an OS command injection in XikeStor network switch firmware, but provides no PoC, exploit, patch, or active exploitation details.
0000045
4.0K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	seekswan	zikestor_sks8310-8x	-	-	-
OS	seekswan	zikestor_sks8310-8x_firmware	-	-	-

Explore more

Back to dashboard seekswan CVEs zikestor_sks8310-8x vulnerabilities

What researchers are saying

CVE-2026-25070

CVE@CVEnewDisclosure

The post announces an OS command injection vulnerability in XikeStor SKS8310-8X firmware, providing only the CVE reference and endpoint detail.

Infoflowcloud@infoflowcloudDisclosure

The text announces a newly identified OS command injection vulnerability (CVE-2026-25070) in XikeStor SKS8310‑8X firmware, providing a link to the official CVE record for more details.

0day Signal@0dayPublishingDisclosure

A new CVE-2026-25070 has been announced, exposing unauthenticated, root-level remote code execution on XikeStor network switches via a ping parameter injection, but no exploit code, active usage, patch, or PoC is disclosed.

VulDB 🛡@vuldbDisclosure

The post announces that CVE-2026-25070, affecting the Anhui Seeker Electronic XikeStor SKS8310-8X, has been added to VULDB, but provides no additional technical or exploit details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE-2026-25070 as an OS command injection in XikeStor network switch firmware, but provides no PoC, exploit, patch, or active exploitation details.