Skip to content
OpenAdvisories
High · 7.5 CVE-2026-88263 EUVD-2026-80224GHSA-jxpm-cmg2-h9hw

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration da…

Published Sep 16, 2026 · Updated Sep 16, 2026 · Assigned by jpcert

Description

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host.

Affected products

VendorProductAffectedFixed
XikeStor SKS8310-8X < V1.04.B09 V1.04.B09
XikeStor SKS8300-8T < V1.04.B09 V1.04.B09
XikeStor SKS8300-12E2T2X < V1.04.B09 V1.04.B09

References