What is CVE-2026-88263?

CVE-2026-88263 is a high-severity vulnerability in Xikestor Sks8300-12e2t2x, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2026-09-16.

How severe is CVE-2026-88263?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Xikestor Sks8300-12e2t2x

CVE-2026-88263

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host.

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Xikestor Sks8300-12e2t2x
Xikestor Sks8300-8t
Xikestor Sks8310-8x

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

vultures@jpcert.or.jp
vultures@jpcert.or.jp

Frequently asked questions

What is CVE-2026-88263?: CVE-2026-88263 is a high-severity vulnerability in Xikestor Sks8300-12e2t2x, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2026-09-16.
How severe is CVE-2026-88263?: High severity. CVSS v3 base score is 7.5 out of 10.