Reflected XSS Vulnerability in Simplicity Device Manager Tool by Silicon Labs
CVE-2025-11004
7.5HIGH
Key Information:
- Vendor
Silabs.com
- Vendor
- CVE Published:
- 10 February 2026
What is CVE-2025-11004?
The Simplicity Device Manager Tool from Silicon Labs is vulnerable to a reflected XSS attack across several API endpoints. This flaw allows an attacker on the same network to exploit the vulnerability, potentially compromising the confidentiality, integrity, and availability of affected systems that run the Simplicity Device Manager Tool. Immediate attention and remedial action are necessary to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Simplicity Device Manager 0 <= 0.99.35 - alpha
