Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-10461 EUVD-2025-208725

Global file reads caused by improper URL checks in webserver

Published Mar 16, 2026 · Updated Mar 27, 2026 · Assigned by Softing

Description

Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.

This issue affects

smartLink SW-HT: through 1.42

smartLink SW-PN: through 1.03.

Affected products

VendorProductAffectedFixed
Softing smartLink SW-HT ≤ 1.42 1.43
Softing smartLink SW-PN ≤ 1.03 1.04

References