Arbitrary Code Execution Vulnerability in SICK Device Driver Software
CVE-2026-80469

8.3HIGH

Key Information:

Vendor

Sick Ag

Status
Sentio Creator Extension 'device Manager'
Vendor
CVE Published:
11 September 2026

What is CVE-2026-80469?

The vulnerability allows an attacker to execute arbitrary code on the target system by uploading a malicious device driver package. This exploit circumvents driver verification mechanisms and requires user interaction to initiate the execution of attacker-controlled code. Proper security practices should be enforced to mitigate risks related to the installation of unverified drivers.

Affected Version(s)

Sentio Creator Extension 'Device Manager' 0 <= 1.4

References

https://www.sick.com/psirt
x_SICK PSIRT Security Advisories
https://www.sick.com/media/docs/9/19/719/special_informat...
x_SICK Operating Guidelines
https://www.cisa.gov/resources-tools/resources/ics-recomm...
x_ICS-CERT recommended practices on Industrial Security

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.