XikeStor SKS8310-8X vulnerabilities

3 known vulnerabilities in XikeStor SKS8310-8X from Anhui Seeker Electronic Technology. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  XikeStor SKS8310-8X: Use of Insufficiently Random Values

  CVE-2026-25072Mar 7, 2026Anhui Seeker Electronic Technology

  XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote attackers to hijack authenticated sessions. Attackers can predict session identif

• 7.5 High severity

  XikeStor SKS8310-8X: Missing Authentication for Critical Functionality

  CVE-2026-25071Mar 7, 2026Anhui Seeker Electronic Technology

  XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows unauthenticated remote attackers to download device configuration files. Attackers can access

• 9.8 Critical severity

  XikeStor SKS8310-8X: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-25070Mar 7, 2026Anhui Seeker Electronic TechnologyEPSS 3.31%

  XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows unauthenticated remote attackers to execute arbitrary operating system commands. Attackers can