CVE-2026-13148: CWE-401 Missing release of memory after effective lifetime in Softing smartLink HW-PN

This vulnerability (CWE-401) in Softing smartLink HW-PN involves a missing release of memory after its effective lifetime, resulting in a resource leak exposure. The affected versions include 1.04 and all versions prior to 1.10. The CVSS 4.0 base score is 6.3, indicating medium severity. The attack vector is network-based with low complexity and no user interaction required. The vulnerability does not impact confidentiality, integrity, or availability directly but may degrade system performance due to resource exhaustion over time. No vendor remediation or patch has been disclosed as of the publication date.

The vulnerability can cause resource leaks due to unreleased memory, potentially leading to degraded system performance or denial of service conditions if the resource exhaustion becomes severe. There is no direct impact on confidentiality, integrity, or availability reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, monitor vendor communications for updates. Until a patch is available, consider limiting exposure by restricting network access to the affected device and ensuring proper resource monitoring to detect abnormal memory usage.