Bender GmbH & Co. KG vulnerabilities and threats

The Bender EDGE500IP device contains vulnerabilities in its Linux kernel TLS implementation (CVE-2025-39682) and the AF_ALG crypto socket interface (CVE-2025-39964). These vulnerabilities can be exploited by an attacker with local code execution capabilities to compromise the confidentiality, integrity, and availability of the device. Exploitation in the wild is confirmed, and the issue is considered critical. No specific affected versions or patch information is provided.