What is the CVSS score of CVE-2026-25072?

CVE-2026-25072 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Zikestor Sks8310 8x Firmware are affected by CVE-2026-25072?

XikeStor SKS8310-8X network switches running firmware 1.04.B07 and earlier are vulnerable to session hijacking attacks that could allow unauthorized administrative access without credentials.

How to fix or mitigate CVE-2026-25072?

Within 24 hours: Inventory all XikeStor SKS8310-8X switches and document firmware versions; restrict network access to management interfaces to trusted administrative networks only. Within 7 days: Contact XikeStor for patch availability and ETA; implement network segmentation to isolate affected switches from untrusted segments; enable enhanced logging on affected devices. Within 30 days: Apply vendor patch immediately upon release; audit all administrative access logs for suspicious session activity; reset all administrator credentials post-patching.

Zikestor Sks8310 8x Firmware CVE-2026-25072

CRITICAL

Use of Insufficiently Random Values (CWE-330)

2026-03-07 disclosure@vulncheck.com

Authentication Bypass Zikestor Sks8310 8x Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 07, 2026 - 01:15 nvd

CRITICAL 9.8

DescriptionCVE.org

XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote attackers to hijack authenticated sessions. Attackers can predict session identifiers using insufficiently random cookie values and exploit exposed session parameters in URLs to gain unauthorized access to authenticated user sessions.

AnalysisAI

Predictable session identifier generation in XikeStor SKS8310-8X network switch allows session hijacking even if the command injection (CVE-2026-25070) is patched.

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Intercept SetLogin endpoint traffic

Delivery

Predict session identifier from insufficiently random cookie

Exploit

Craft forged session cookie

Execution

Inject into subsequent requests

Persist

Bypass authentication controls

Impact

Access authenticated management interface

Access

Intercept SetLogin endpoint traffic

Delivery

Predict session identifier from insufficiently random cookie

Exploit

Craft forged session cookie

Execution

Inject into subsequent requests

Persist

Bypass authentication controls

Impact

Access authenticated management interface

Vulnerability AssessmentAI

Exploitation	XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior with /goform/SetLogin endpoint accessible over network. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 9.8. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Attacker analyzes session ID pattern, predicts active admin session token, hijacks session to manage the switch.
Remediation	Update firmware. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory all XikeStor SKS8310-8X switches and document firmware versions; restrict network access to management interfaces to trusted administrative networks only. …

Threat intelligence, references, and detailed analysis are available after sign-in.