CVE-2025-10685: HTTP POST with specific higher content length leads into heap corruption

Severity: high (CVSS 7.7 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-03-16 · updated 2026-06-17
Weakness: CWE-122

Description

Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: smartLink SW-PN: through 1.03 smartLink SW-HT: through 1.42

Affected products

Softing smartLink SW-HT: through 1.42
Softing smartLink SW-PN: through 1.03

References

https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.html
https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.json

Get alerted when CVE-2025-10685 or the next vulnerability affects your stack