Is CVE-2025-8461 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-8461 being exploited in the wild.

How severe is CVE-2025-8461?

High severity, with a CVSS score of 7.6, published 3 February 2026.

Which products and versions are affected?

Seres Software syWEB through 03022026.

Is there a fix for CVE-2025-8461?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-8461 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2025-8461?

Check whether you run Seres Software syWEB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-8461: Seres Software syWEB reflected XSS

CVE-2025-8461 · Severity: high · CVSS 7.6 · Published 2026-02-03

Seres Software syWEB, a web-based application, contains a security vulnerability that could allow an attacker to execute malicious scripts in a user's browser. By tricking a user into clicking a specially crafted link, an attacker could potentially steal login session information or perform unauthorized actions on behalf of the user. This issue remains unpatched as the vendor has not responded to disclosure attempts.

Technologies: Seres Software syWEB. Vendors: Seres Software.

Quick answers

Is CVE-2025-8461 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-8461 being exploited in the wild.
How severe is CVE-2025-8461?: High severity, with a CVSS score of 7.6, published 3 February 2026.
Which products and versions are affected?: Seres Software syWEB through 03022026.
Is there a fix for CVE-2025-8461?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-8461 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2025-8461?: Check whether you run Seres Software syWEB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A reflected cross-site scripting (XSS) vulnerability exists in Seres Software syWEB through version 03022026. The application fails to properly sanitize or neutralize input before including it in dynamically generated web pages (CWE-79). An unauthenticated remote attacker can exploit this by sending a crafted URL to a victim; if the victim visits the link, the attacker's script executes within the context of the victim's browser session. This can lead to session hijacking, unauthorized data access, or modification of page content. As of the disclosure date, the vendor has not provided a patch or response.

Affected products

Seres Software syWEB through 03022026

Timeline

2026-02-03: advisory: Initial disclosure by TR-CERT/USOM
2026-02-03: disclosed: Public disclosure of CVE-2025-8461

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.