PT-2026-8323 · Kubysoft · Kubysoft

CVE-2025-59905 · Publicado 2026-02-16 · Atualizado 2026-03-09

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kubysoft (affected versions not specified)

Description A reflected Cross-Site Scripting (XSS) flaw exists in Kubysoft. The issue occurs through multiple parameters within the API endpoint /node/kudaby/nodeFN/procedure. This allows for the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser. The vulnerable parameters are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-59905

Produtos afetados

Kubysoft

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-59905 · Nota de Segurança
• https://t.me/CVEtracker/44804 · Publicação no Telegram
• https://t.me/cveNotify/154877 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2023353810257576009 · Publicação no Twitter
• https://incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-kubysoft · Nota
• https://twitter.com/VulmonFeeds/status/2023357413986877445 · Publicação no Twitter