CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report functionality.

• CWE-20

• https://cert-portal.siemens.com/productcert/html/ssa-882673.htmlVendor Advisory

Published

Dec 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4082Modification of specific WebGL shader attributes could trigg…5.9
• CVE-2025-40820Affected products do not properly enforce TCP sequence numbe…8.7
• CVE-2025-40827A vulnerability has been identified in Siemens Software Cent…8.5
• CVE-2025-40829A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2025-4083A process isolation vulnerability in Thunderbird stemmed fro…9.1
• CVE-2025-40830A vulnerability has been identified in SINEC Security Monito…8.4
• CVE-2025-40833The affected devices contain a null pointer dereference vuln…8.7
• CVE-2025-40834A vulnerability has been identified in Mendix RichText (All …6.8
• CVE-2025-40836Ericsson Indoor Connect 8855 contains an improper input vali…9.8
• CVE-2025-40837Ericsson Indoor Connect 8855 contains a missing authorizatio…8.8
• CVE-2025-40838Ericsson Indoor Connect 8855 contains a vulnerability where …7.5
• CVE-2025-4084Due to insufficient escaping of the special characters in th…5.7