VulnSocial

CVE-2026-25073Disclosure(seekswan / zikestor_sks8310-8x)

LOWCVSS 5.4 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary script content through the System Name field. Attackers can inject malicious scripts that execute in a victim's browser when the stored value is viewed due to improper output encoding.

seekswan CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • zikestor_sks8310-8x
  • zikestor_sks8310-8x_firmware

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
seekswan
Products
zikestor_sks8310-8xzikestor_sks8310-8x_firmware

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-07: 3Technical Details · 2026-03-07: 303-07
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-25073 XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inj… https://www.cve.org/CVERecord?id=CVE-2026-25073 ----- Traducción: CVE-2026-25073 Xik… http://infoflow.cloud`

    Post summary

    The CVE-2026-25073 advisory reveals a stored cross‑site scripting flaw in XikeStor SKS8310‑8X network switch firmware 1.04.B07 and earlier, allowing authenticated attackers to inject malicious scripts.

    0000035
    56 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-25073 XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inj… https://www.cve.org/CVERecord?id=CVE-2026-25073

    Post summary

    The statement reports a stored cross‑site scripting flaw (CVE‑2026‑25073) in certain XikeStor switch firmware, with no evidence of PoC, exploitation, patch, or false claim.

    00000183
    56.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-25073 Stored XSS Vulnerability in XikeStor SKS8310-8X Network Switch Firmware https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25073

    Post summary

    The post simply names CVE-2026‑25073 as a stored XSS flaw in XikeStor firmware and links to a vulnerability page, but provides no further technical details, patches, or exploitation evidence.

    0000054
    4.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWseekswanzikestor_sks8310-8x---
OSseekswanzikestor_sks8310-8x_firmware---

Explore more

Back to dashboardseekswan CVEszikestor_sks8310-8x vulnerabilities