Code Execution Vulnerability in SICK Products
CVE-2026-22913

4.3MEDIUM

Key Information:

Vendor

Sick Ag

Status
Tdc-x401gl
Vendor
CVE Published:
15 January 2026

What is CVE-2026-22913?

A vulnerability exists in various SICK industrial products due to improper handling of a URL parameter. This flaw could allow attackers to execute unauthorized code in a user's browser post-login, potentially leading to the extraction of sensitive data. Users are advised to review the security guidelines and implement recommended practices to safeguard their systems.

Affected Version(s)

TDC-X401GL 0

References

https://sick.com/psirt
x_SICK PSIRT Security Advisories
https://www.sick.com/media/docs/9/19/719/special_informat...
x_SICK Operating Guidelines
https://www.cisa.gov/resources-tools/resources/ics-recomm...
x_ICS-CERT recommended practices on Industrial Security

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.