Security Advisory

CVE-2025-59905

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-16 09:49:45

Last updated 2026-02-17 16:44:06

Assigner INCIBE

CVSS score 4.8

State PUBLISHED

Description

Cross-Site Scripting (XSS) vulnerability reflected in Kubysoft, which occurs through multiple parameters within the endpoint ‘/node/kudaby/nodeFN/procedure’. This flaw allows the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser.

← Browse all CVEs View on cve.org ↗