Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Anhui Seeker Electronic Technology Co., LTD. Clear all filters
TI-2026-20254 CVE-2026-25073 · GHSA-72gc-g5j4-jr36

XikeStor SKS8310-8X Stored XSS via System Name

Priority LOW 23

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary script content through the System Name f…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00212 Published 2026-03-07 No fix listed CWE-79
TI-2026-20253 CVE-2026-25072 · GHSA-94rf-v38j-r4r9

XikeStor SKS8310-8X Predictable Session Identifiers

Priority MEDIUM 40

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote attackers to hijack authenticated session…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00563 Published 2026-03-07 No fix listed CWE-330
TI-2026-20252 CVE-2026-25071 · GHSA-48cc-qpxg-8w25

XikeStor SKS8310-8X switch_config.src Missing Authentication

Priority MEDIUM 45

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows unauthenticated remote attackers to download device co…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00595 Published 2026-03-07 No fix listed CWE-306
TI-2026-20251 CVE-2026-25070 · GHSA-fv5f-w79h-cj2p

XikeStor SKS8310-8X PingTestSet Command Injection

Priority MEDIUM 54

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows unauthenticated remote attackers to execute arbitrary…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03306 Published 2026-03-07 No fix listed CWE-78