Riskcovery

CVE-2025-10461

Global file reads caused by improper URL checks in webserver

State
Published
Severity
5.3 Medium
Published
Mar 16, 2026
Updated
Mar 27, 2026
Reserved
Sep 15, 2025

Read the record on cve.org

Description

Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.

This issue affects

smartLink SW-HT: through 1.42

smartLink SW-PN: through 1.03.

Scores

CVSSScoreVectorSource
4.05.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/AU:Y/R:A/RE:L/U:GreenSofting

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
smartLink SW-HTSofting
  • 1.42 and earlierAffected
  • 1.43Not affected
smartLink SW-PNSofting
  • 1.03 and earlierAffected
  • 1.04Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.