Softing Smartlink Sw-Pn vulnerabilities

2 CVEs affecting Softing Smartlink Sw-Pn, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10685, published 2026-03-16.

More from Softing.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-10685, published 2026-03-16. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: smartLink SW-PN:…
• CVE-2025-10461, published 2026-03-16. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink…