{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T05:29:25.672","vulnerabilities":[{"cve":{"id":"CVE-2026-22646","sourceIdentifier":"psirt@sick.de","published":"2026-01-15T14:16:28.430","lastModified":"2026-06-17T10:20:11.970","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information (like file paths, database errors, or software versions) that can be used to map the application's internal structure and discover other, more critical vulnerabilities."},{"lang":"es","value":"Ciertos mensajes de error devueltos por la aplicación exponen detalles internos del sistema que no deberían ser visibles para los usuarios finales, proporcionando a los atacantes información valiosa de reconocimiento (como rutas de archivos, errores de base de datos o versiones de software) que puede ser utilizada para mapear la estructura interna de la aplicación y descubrir otras vulnerabilidades más críticas."}],"affected":[{"source":"psirt@sick.de","affectedData":[{"vendor":"SICK AG","product":"Incoming Goods Suite","defaultStatus":"affected","versions":[{"version":"0","lessThan":"1.2.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@sick.de","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-15T14:35:14.803887Z","id":"CVE-2026-22646","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@sick.de","type":"Secondary","description":[{"lang":"en","value":"CWE-209"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sick:incoming_goods_suite:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.1","matchCriteriaId":"E6E02E7A-B758-4262-9F62-24229C60F17A"}]}]}],"references":[{"url":"https://sick.com/psirt","source":"psirt@sick.de","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","source":"psirt@sick.de","tags":["US Government Resource"]},{"url":"https://www.first.org/cvss/calculator/3.1","source":"psirt@sick.de","tags":["Not Applicable"]},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json","source":"psirt@sick.de","tags":["Vendor Advisory"]},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf","source":"psirt@sick.de","tags":["Vendor Advisory"]},{"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","source":"psirt@sick.de","tags":["Product"]}]}}]}