CVE-2025-65230

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-12-08 · updated 2026-10-15
Weakness: CWE-79

Description

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input.

Affected products

Barix Instreamer Firmware: 4.05, 4.06

References

https://github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65230
https://help.barix.com/instreamer/user-manual
https://github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65230

Get alerted when CVE-2025-65230 or the next vulnerability affects your stack