CVE-2025-10461

Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink SW-HT: through 1.42 smartLink SW-PN: through 1.03.

Score

CVSS 4.0 5.3 Medium

Status

Awaiting Analysis - 10de8ef9-5c89-4b17-8228-e97b74acf4bd

Published

2026-03-16

Last modified

2026-03-27

Weaknesses

CWE-20

Affected products

• Smartlink Sw-ht (Softing)
• Smartlink Sw-pn (Softing)

References

• https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.html
• https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.json