High severityNVD Advisory· Published Jun 19, 2026· Updated Jun 22, 2026
CVE-2026-12104
CVE-2026-12104
Description
OS command injection in the environment and tunnel configuration functionality in SIMA GmbH Bondix through version 1.25.7.5 on Linux allows an authenticated attacker with configuration write access to execute arbitrary operating-system commands via crafted configuration values passed to server-side scripts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=1.25.7.5
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.