Medium severity5.5NVD Advisory· Published Aug 20, 2025· Updated Jun 17, 2026

CVE-2025-9225

Description

Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MiR/MiR softwarellm-create
Range: <3.0.0
MiR/MiR Fleetllm-create
Range: <3.0.0
MiR/MiR robotsllm-fuzzy
Range: <3.0.0

Patches

Vulnerability mechanics

References

mobile-industrial-robots.com/security-advisories/cross-site-scriptingnvd
supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000