medium5.3
CVE-2026-22645
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known sec…
Impact
The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sick | Incoming Goods Suite | before 1.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf