CVE-2025-65230

MediumCVSS 5.4

Published: 08/12/2025(UTC)Updated: 15/10/2026(UTC)Translated: 16/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input.

Risk Assessment

An attacker can inject malicious code that is stored and executed in the browser of a user visiting the web interface, potentially leading to session theft or unauthorized actions.

Recommendation

Update Barix Instreamer software to the latest version if a fix is available. In the meantime, restrict access to the web interface to trusted networks and users only.

Other vulnerabilities in Barix Instreamer

CVE-2025-65231Medium
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field, which is stored and later rendered on the Status page.

Original NVD description (English source)

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS