CVE-2025-10461

UNKNOWN 0.0

Global file reads caused by improper URL checks in webserver

CVSS Score

0.0

EPSS Score

0.1%

EPSS Percentile

26th

Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink SW-HT: through 1.42 smartLink SW-PN: through 1.03.

CWE	CWE-20
Vendor	softing
Product	smartlink sw-ht
Published	Mar 16, 2026
Last Updated	Mar 27, 2026

Stay Ahead of the Next One

Get instant alerts for softing smartlink sw-ht

Be the first to know when new unknown vulnerabilities affecting softing smartlink sw-ht are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Softing / smartLink SW-HT

0 ≤ 1.42

Softing / smartLink SW-PN

0 ≤ 1.03

References

NVD ↗ CVE.org ↗ EPSS Data ↗

industrial.softing.com: https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.html industrial.softing.com: https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.json

Credits

OpenVAS