Back to Database
Status published
Medium
CVE-2025-10461
Global file reads caused by improper URL checks in webserver
Vulnerability Description
Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink SW-HT: through 1.42 smartLink SW-PN: through 1.03.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10461
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- OpenVAS
References
More from Softing
View All →CVE-2025-7390
Bypass the client certificate trust check of an opc.https server while only secure communication is allowed
Critical
9.1
CVE-2025-13406
Scanning for higher HART revision device leads into NULL pointer dereference in live list
Medium
6.8
CVE-2025-10685
HTTP POST with specific higher content length leads into heap corruption
High
7.7
CVE-2024-14028
Multiple implicit reads in parallel can result in a crash or denial of service
Medium
6.5
CVE-2024-0860
Cleartext Transmission of Sensitive Information in Softing edgeConnector and edgeAggregator
High
8
Affected Vendor
Softing
View all reports →Affected Software
smartLink SW-HT, smartLink SW-PN
Vulnerable Versions:
0, 1.43, 1.04
Timeline
Official Publish:
March 16th, 2026
Last Modified:
March 27th, 2026
Added to House:
July 22nd, 2026