SIMA GmbH Bondix Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SIMA GmbH Bondix Server: 1 record(s), with affected versions and fixes.

CVE-2026-12104 High · 8.6 CWE-78 Jun 19, 2026

Authenticated OS Command Injection in Bondix

OS command injection in the environment and tunnel configuration functionality in SIMA GmbH Bondix through version 1.25.7.5 on Linux allows an authenticated attacker with configuration write access to execute arbitrary operating-system commands via crafted configuration values passed to server-side scripts.