CVE-2026-12104Patch

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OS command injection in the environment and tunnel configuration functionality in SIMA GmbH Bondix through version 1.25.7.5 on Linux allows an authenticated attacker with configuration write access to execute arbitrary operating-system commands via crafted configuration values passed to server-side scripts.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://nvd.nist.gov/vuln/detail/CVE-2026-12104

Full discourse1 post

ADK Cyber@ADKCyber137d
Patch
High CVSS 8.6 CVE-2026-12104 affects SIMA GmbH Bondix <=1.25.7.5 on Linux. Organizations using this software should review and apply updates. https://nvd.nist.gov/vuln/detail/CVE-2026-12104 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/jBXtKVO1wc
Post summary
CVE‑2026‑12104 is a high‑severity flaw affecting Bondix version 1.25.7.5 or lower on Linux; vendors have released updates, and users should apply them promptly.
0000039
92 followersView on X

Explore more

Back to dashboard