CVE-2026-12104

Published Jun 19, 2026

Last updated 14 days ago

CVSS high 8.6
ICS

Overview

Description
OS command injection in the environment and tunnel configuration functionality in SIMA GmbH Bondix through version 1.25.7.5 on Linux allows an authenticated attacker with configuration write access to execute arbitrary operating-system commands via crafted configuration values passed to server-side scripts.
Source
vulnerability@ncsc.ch
NVD status
Deferred

Risk scores

CVSS 4.0

Type
Secondary
Base score
8.6
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:L/U:Amber
Severity
HIGH

Weaknesses

vulnerability@ncsc.ch
CWE-78

Social media

Hype score
Not currently trending

Related CVEs

  1. CVE-2024-10085
  2. SimpleHelp Authentication Bypass Vulnerability•CVE-2026-48558
  3. Android Framework Integer Overflow Vulnerability•CVE-2025-48595
  4. Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The affected component is the RDP drive redirection.  Depending on implementation, the vulnerability can be exploited by an unauthenticated attacker. This issue affects SparkView: before build 1127.•CVE-2026-8326
  5. A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it accepts a default administrative credential. A malicious device physically connected to the charging interface could leverage this misconfiguration to obtain full administrative access.•CVE-2026-9039

References

Sources include official advisories and independent security research.