CVE-2025-65231 | THREATINT

Description

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page.

PUBLISHED Reserved 2025-11-18 | Published 2025-12-08 | Updated 2025-12-11 | Assigner mitre

References

github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65231 exploit

help.barix.com/instreamer/user-manual

github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65231

cve.org (CVE-2025-65231)

nvd.nist.gov (CVE-2025-65231)

Download JSON