Barix vulnerabilities
Published CVEs affecting Barix products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-65230
Medium · 5.4
CWE-79 Dec 8, 2025
Cross-site Scripting (XSS) in Barix Instreamer Firmware
Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destination input.
CVE-2025-65231
Medium · 6.1
CWE-79 Dec 8, 2025
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O...
Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page.