What’s Vulnerable › Vulnerabilities

CVE-2026-13148: Memory leak in scan method

• Severity: medium (CVSS 6.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-09-09
• Weakness: CWE-401

Description

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10.

Affected products

• Softing smartLink HW-PN: from 1.04 before 1.10 — fixed in 1.10

How to fix

Upgrade to a fixed version: Softing smartLink HW-PN 1.10. Check the vendor advisory for mitigations.

References

• https://industrial.softing.com/fileadmin/psirt/downloads/2026/CVE-2026-13148.html
• https://industrial.softing.com/fileadmin/psirt/downloads/2026/CVE-2026-13148.json

Get alerted when CVE-2026-13148 or the next vulnerability affects your stack