CVE Program partner

Softing

Softing

API
CVEs, 365 days89 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationSofting
RoleCNA
TypeVendor
Reports tomitre
ScopeSofting issues only.
Advisorieshttps://company.softing.com/psirt.html

Latest CVEs · RSS

  • CVE-2026-13148 2026-09-04 · CVSS 6.3
    Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1
  • CVE-2023-7339 2026-03-27 · CVSS 6.5
    Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate
  • CVE-2024-14028 2026-03-27 · CVSS 6.5
    Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects: smartLink HW-DP: through 1.31 smartLin
  • CVE-2025-13406 2026-03-17 · CVSS 6.8
    NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink SW
  • CVE-2025-10461 2026-03-16 · CVSS 5.3
    Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.
  • CVE-2025-10685 2026-03-16 · CVSS 7.7
    Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.T
  • CVE-2025-10151 2025-10-28 · CVSS 7.2
    Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink
  • CVE-2025-10150 2025-10-28 · CVSS 8.7
    Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 throu
  • CVE-2025-7390 2025-08-21 · CVSS 9.1
    A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communicatio

All CVE Program partners