CVE-2026-13148CWE-401

CVE-2026-13148

published September 4, 2026

CVSS
6.3
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure.

This issue affects smartLink HW-PN: from 1.04 before 1.10.

The record
Technical detail
CVSS
6.3 · NONE
CVSS v4.0
6.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:L/AU:Y/R:A/RE:L/U:Red
EPSS
0.00380 · 31.2th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-09-04T14:17Z
References (2)
https://industrial.softing.com/fileadmin/psirt/downloads/2026/CVE-2026-13148.html · 10de8ef9-5c89-4b17-8228-e97b74acf4bdhttps://industrial.softing.com/fileadmin/psirt/downloads/2026/CVE-2026-13148.json · 10de8ef9-5c89-4b17-8228-e97b74acf4bd
EPSS history
Timeline
  • 05 SEP 03:40Z
    EPSS moved — → 0%
    epss
  • 04 SEP 09:44Z
    Memory leak in scan method
    cvelistv5