CVE-2025-11696

CVE-2025-11696CVE-2025-11696

Description

A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.

Scoring

Last modified2026-10-18
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.