CVE-2025-8668

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard allows Reflected XSS. This issue affects Turboard: from 2025.07 before 2026.02.  NOTE: This CVE record updated after the vendor implemented mitigations.

• CWE-79

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0060
• https://www.usom.gov.tr/bildirim/tr-26-0060

Published

Feb 11, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8662OpenAM (OpenAM Consortium Edition) contains a vulnerability …4.3
• CVE-2025-8663Insertion of Sensitive Information into Log File vulnerabili…6.5
• CVE-2025-8664Improper Neutralization of Input During Web Page Generation …6.3
• CVE-2025-8665A vulnerability, which was classified as critical, has been …6.3
• CVE-2025-8666The Testimonial Carousel For Elementor plugin for WordPress …6.4
• CVE-2025-8667A vulnerability, which was classified as critical, was found…6.3
• CVE-2025-8669The Customify theme for WordPress is vulnerable to Cross-Sit…4.3
• CVE-2025-8671A mismatch caused by client-triggered server-sent stream res…7.5
• CVE-2025-8672MacOS version of GIMP bundles a Python interpreter that inhe…7.8
• CVE-2025-8675Server-Side Request Forgery (SSRF) vulnerability in Drupal A…8.8
• CVE-2025-8676The B Slider- Gutenberg Slider Block for WP plugin for WordP…4.3
• CVE-2025-8677Querying for records within a specially crafted zone contain…7.5