SIMA GmbH vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SIMA GmbH products: 1 record(s), with severity, exploitation and fixes.

Bondix Server 1

Exploited only (KEV) →

CVE-2026-12104 High · 8.6 CWE-78 Jun 19, 2026

Authenticated OS Command Injection in Bondix

OS command injection in the environment and tunnel configuration functionality in SIMA GmbH Bondix through version 1.25.7.5 on Linux allows an authenticated attacker with configuration write access to execute arbitrary operating-system commands via crafted configuration values passed to server-side scripts.