PT-2026-8323 · Kubysoft · Kubysoft

Published 2026-02-16 · Updated 2026-03-09 · CVE-2025-59905

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kubysoft (affected versions not specified)

Description A reflected Cross-Site Scripting (XSS) flaw exists in Kubysoft. The issue occurs through multiple parameters within the API endpoint /node/kudaby/nodeFN/procedure. This allows for the injection of arbitrary client-side scripts, which are immediately reflected in the HTTP response and executed in the victim's browser. The vulnerable parameters are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-59905

Affected Products

Kubysoft

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-59905 · Security Note
• https://t.me/CVEtracker/44804 · Telegram Post
• https://t.me/cveNotify/154877 · Telegram Post
• https://twitter.com/CVEnew/status/2023353810257576009 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-kubysoft · Note
• https://twitter.com/VulmonFeeds/status/2023357413986877445 · Twitter Post