What’s Vulnerable › Vulnerabilities

CVE-2026-88263

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-09-16
• Weakness: CWE-306

Description

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host.

Affected products

• XikeStor SKS8300-12E2T2X: before V1.04.B09 — fixed in V1.04.B09
• XikeStor SKS8300-8T: before V1.04.B09 — fixed in V1.04.B09
• XikeStor SKS8310-8X: before V1.04.B09 — fixed in V1.04.B09

How to fix

Upgrade to a fixed version: XikeStor SKS8300-12E2T2X V1.04.B09; XikeStor SKS8300-8T V1.04.B09; XikeStor SKS8310-8X V1.04.B09. Check the vendor advisory for mitigations.

References

• https://jvn.jp/en/jp/JVN45281119/
• https://www.xikestor.com/security-advisory/

Get alerted when CVE-2026-88263 or the next vulnerability affects your stack