VulnerabilityPublished 16 Sep 2026

XikeStor Layer3 switches miss authentication for downloading configuration data

Source JVN Japan

Severity

High

Rated by Threat Radar

Data as of 16 Sep 2026, 03:19 UTC

What to do

Description

XikeStor Layer3 switches have a vulnerability where authentication is missing when downloading configuration data. This means unauthorized users could potentially access configuration information without proper credentials.

Impact

Unauthorized access to configuration data may lead to exposure of sensitive network settings, which could facilitate further attacks or network compromise. However, no known exploits are reported in the wild at this time.

Summary

The vulnerability in XikeStor Layer3 switches involves the absence of authentication controls when downloading configuration data. This flaw allows an attacker to retrieve configuration settings without needing to authenticate, potentially exposing sensitive network configuration details.

References

jvn.jp/en/jp/JVN45281119/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 16 Sep 2026, 03:19 UTC

References

Community reviews